d:\ccviews\autobuild1_br-0804-0130_14.34_snapshot\workingdirectory1\hdmiinstaller\1.1.10\installer\hdmi\release\Setup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ebb9061b34d3f38da1e0b8df0e250450_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebb9061b34d3f38da1e0b8df0e250450_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebb9061b34d3f38da1e0b8df0e250450_JaffaCakes118
-
Size
978KB
-
MD5
ebb9061b34d3f38da1e0b8df0e250450
-
SHA1
009ade88276630c76ad5f278ff37a7559792b6fc
-
SHA256
411e286b6e16c4670a202755e0529ab45d2aad66e6bea177122c68d03d95a539
-
SHA512
7379b0ddf48c67c06fe43d3de25c30225672776ef993d222d9fae40d41b6544e1469cecdacb4795743d3324c9b09dd60e38d2d09e67108f963b5c9b89c43870f
-
SSDEEP
12288:Wa7Kun7XUif26zblEOGSEzUvzblE4wEQRUSEcfv44IdmIKy:Jv7Eif26+OP+ac34
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebb9061b34d3f38da1e0b8df0e250450_JaffaCakes118
Files
-
ebb9061b34d3f38da1e0b8df0e250450_JaffaCakes118.exe windows:4 windows x86 arch:x86
d182bae9bf97565513e3309257f7d475
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
setupapi
SetupGetLineTextW
SetupFindNextLine
SetupCloseInfFile
SetupFindFirstLineW
SetupOpenInfFileW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetINFClassW
SetupDiGetDeviceRegistryPropertyW
SetupCopyOEMInfW
SetupGetStringFieldW
shlwapi
PathIsDirectoryEmptyW
PathFileExistsW
PathIsRootW
PathRemoveFileSpecW
PathAppendW
PathFindFileNameW
kernel32
CreateThread
VerifyVersionInfoW
VerSetConditionMask
FindNextFileW
FindClose
FindFirstFileW
GetLocalTime
GetCurrentProcess
GetProcAddress
GetModuleHandleW
GetVersionExW
TerminateProcess
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
FreeLibrary
LoadLibraryW
GetSystemDirectoryW
GetFileAttributesW
WriteFile
CreateFileA
GetModuleFileNameA
GetTempPathA
GetModuleFileNameW
GetWindowsDirectoryW
RemoveDirectoryW
MoveFileExW
DeleteFileW
SetFileAttributesW
Sleep
CopyFileW
ExitProcess
CreateProcessW
CreateEventW
OutputDebugStringW
ConvertDefaultLocale
GetSystemDefaultLangID
EnumResourceLanguagesW
SetFilePointer
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSection
GetStdHandle
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetOEMCP
SetEvent
FindResourceW
SizeofResource
LoadResource
LockResource
MultiByteToWideChar
CreateFileW
GetFileSize
ReadFile
CloseHandle
WaitForSingleObject
SetLastError
GetLastError
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetLocaleInfoW
GetACP
GetCPInfo
HeapSize
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
GetProcessHeap
GetVersionExA
GetModuleHandleA
HeapAlloc
HeapFree
RtlUnwind
LocalAlloc
InterlockedExchange
LoadLibraryA
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
user32
KillTimer
SetTimer
ShowWindow
EnableWindow
MapDialogRect
LoadImageW
DialogBoxParamW
PostMessageW
SendDlgItemMessageW
EndDialog
SetDlgItemTextW
SetWindowTextW
SetFocus
SetWindowPos
GetDlgItem
SendMessageW
GetDC
ExitWindowsEx
GetWindowThreadProcessId
GetWindowModuleFileNameW
EnumWindows
MessageBoxW
LoadStringW
wsprintfW
LoadIconW
ReleaseDC
gdi32
GetTextExtentPoint32W
SetTextColor
SetBkMode
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
CreateSolidBrush
CreateFontW
SelectObject
advapi32
AdjustTokenPrivileges
RegDeleteValueW
RegEnumValueW
RegQueryValueExW
CreateServiceW
ChangeServiceConfigW
ChangeServiceConfig2W
StartServiceW
QueryServiceStatus
ControlService
DeleteService
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
OpenProcessToken
LookupPrivilegeValueW
IsTextUnicode
shell32
SHGetFolderPathW
ShellExecuteA
SHCreateDirectoryExW
ole32
OleInitialize
OleUninitialize
CoInitialize
CoCreateInstance
psapi
EnumProcessModules
EnumProcesses
GetModuleFileNameExW
GetModuleBaseNameW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 264KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 564KB - Virtual size: 561KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nrdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE