e:\rczip\trunk\bin\Win32\release\pdb\HaoZip7zSetup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d521385e42ac3780514bec2a3583ae62_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d521385e42ac3780514bec2a3583ae62_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d521385e42ac3780514bec2a3583ae62_JaffaCakes118
-
Size
3.1MB
-
MD5
d521385e42ac3780514bec2a3583ae62
-
SHA1
9964302d40a1ed8e386f00578f534b896cd7b2a9
-
SHA256
9900a46bf84cdf523cdad85f44cdab4963fb804918bc6ddaed932586988c2e16
-
SHA512
32ff75f78aed63ae9d9f3d02da2692987b305aa827d48b20bf4cb59c0d3b46598c8907c569d4e7b0285cf4cb8a0a487cb2d63fd8ffb9995a95e7dd02299f7f83
-
SSDEEP
98304:6lP3D3gBw3JGAVmq9NbuLLnBQAay+ApOBo9/:6lP3D3gBe19bufBQFvApR9/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d521385e42ac3780514bec2a3583ae62_JaffaCakes118
Files
-
d521385e42ac3780514bec2a3583ae62_JaffaCakes118.exe windows:4 windows x86 arch:x86
aecd6c0a2280c5f079ef9d227eb6317f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
InitCommonControlsEx
shell32
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteW
ShellExecuteExW
CommandLineToArgvW
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
kernel32
SetCurrentDirectoryW
CreateProcessW
GetCurrentDirectoryW
LocalFree
WaitForSingleObject
SetFileApisToOEM
GetCurrentProcess
GetCurrentThread
SetPriorityClass
SetThreadPriority
GetLastError
GetEnvironmentVariableW
GetCommandLineW
FormatMessageW
GetModuleHandleW
FindResourceW
GetFileAttributesW
CreateDirectoryW
DeleteFileW
SetFileAttributesW
RemoveDirectoryW
InterlockedIncrement
InterlockedDecrement
FindFirstFileW
FindClose
FindNextFileW
FileTimeToSystemTime
FreeLibrary
GetProcAddress
GetFileSize
ReadFile
CreateFileW
SetFilePointer
SetFileTime
SetEndOfFile
WriteFile
Sleep
GetCurrentThreadId
ResumeThread
GetACP
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameW
GetTempFileNameW
GetLongPathNameW
MoveFileW
CloseHandle
GetTempPathW
GetWindowsDirectoryW
GetVersionExW
ExpandEnvironmentStringsW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
GetModuleFileNameW
lstrlenW
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
ExitThread
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
user32
GetActiveWindow
LoadStringW
GetDesktopWindow
IsDialogMessageW
KillTimer
IsWindowVisible
LoadIconW
EnableWindow
CreateDialogParamW
DispatchMessageW
SetTimer
TranslateMessage
ScreenToClient
ShowWindow
GetMessageW
DestroyIcon
IsWindow
SendMessageW
MessageBoxW
GetWindowRect
GetSystemMetrics
PostMessageW
DialogBoxParamW
SetWindowPos
GetWindowTextW
SetWindowTextW
GetDlgItem
EndDialog
PostQuitMessage
gdi32
CreateSolidBrush
DeleteObject
advapi32
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
ole32
CoUninitialize
CoInitialize
CoTaskMemFree
CoCreateInstance
CoInitializeEx
Sections
.text Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ