ie4uinit.pdb
Static task
static1
Behavioral task
behavioral1
Sample
12980a42062c6c49b8e60cc49d0b1050_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
12980a42062c6c49b8e60cc49d0b1050_JaffaCakes118
-
Size
670KB
-
MD5
12980a42062c6c49b8e60cc49d0b1050
-
SHA1
502ceb2b889c8c60fd5606c2dabcb5cc5760d95a
-
SHA256
12fa68f4d744f52fba403a1367a9e5ee04e63586093b627dab28bd38b8d7ea6e
-
SHA512
27ffac4514768ee2cdcd2dff9e4b4184e56372322207af89ae912dad92ddbf24e9cecd84fb230ba22e19ffc527aa5504223b3eb4763a0cc8b10031af2080455e
-
SSDEEP
12288:YDXUlE4iqMruRrgQNpS0kQkn6CzBbF9VFlpmQHsUEIM8SdSvo4Nf6MgT:NlC7kgmpbk/n6CzdF9VFlpmQHsUEIeSo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12980a42062c6c49b8e60cc49d0b1050_JaffaCakes118
Files
-
12980a42062c6c49b8e60cc49d0b1050_JaffaCakes118.exe windows:6 windows x86 arch:x86
db7b81b02506d126d2a627b8e0d75a13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegEnumValueW
RegOpenKeyExW
RegSetValueW
RegDeleteKeyW
kernel32
GetProcAddress
LoadLibraryW
lstrlenW
GetLastError
GetEnvironmentVariableW
GetVersion
GetModuleHandleW
SetErrorMode
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindClose
FindNextFileW
FindFirstFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
lstrcmpW
FindFirstFileExW
GetShortPathNameW
GetSystemDefaultUILanguage
CreateDirectoryW
LocalFree
LocalAlloc
CloseHandle
CreateFileW
GetTickCount
Sleep
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetPrivateProfileStringW
GetNativeSystemInfo
SetLastError
LoadResource
FindResourceExW
FreeLibrary
GetSystemDirectoryW
GetVersionExW
GetModuleFileNameW
LoadLibraryExW
MapViewOfFile
CreateFileMappingW
GetLocaleInfoW
GetModuleHandleA
UnmapViewOfFile
GetUserDefaultUILanguage
FindResourceW
SearchPathW
SetUnhandledExceptionFilter
RtlUnwind
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
user32
MessageBoxW
LoadStringW
PostMessageW
GetMenuItemInfoW
GetMenuItemCount
DestroyMenu
CreatePopupMenu
SendInput
GetCursorPos
SystemParametersInfoW
PostQuitMessage
SetWinEventHook
KillTimer
DispatchMessageW
GetMessageW
SetTimer
UnhookWinEvent
BlockInput
msvcrt
memcpy
_vsnwprintf
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_time64
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
wcsncmp
_wcsicmp
_wcsnicmp
bsearch
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
shell32
ord526
SHChangeNotify
SHGetSpecialFolderLocation
ord155
SHGetDesktopFolder
ord190
SHGetSpecialFolderPathW
SHBindToParent
SHParseDisplayName
SHSetLocalizedName
ord165
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx
advpack
RunSetupCommandW
ExecuteCabW
RegRestoreAllW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
shlwapi
SHRegGetValueW
StrCmpIW
SHDeleteKeyW
ord225
PathAddExtensionW
PathRemoveBlanksW
SHDeleteValueW
SHSetValueW
PathAppendW
PathRemoveFileSpecW
SHCopyKeyW
StrCmpNIW
PathFileExistsW
PathCombineW
PathAddBackslashW
ord437
ord158
StrStrIW
SHRegSetUSValueW
SHGetValueW
PathRemoveExtensionW
iertutil
ord33
ord37
ord654
ord650
oleacc
AccessibleObjectFromEvent
oleaut32
SysFreeString
VariantClear
Sections
.text Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vmp0 Size: 500KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE