d:\sogoupy_R_4_2\Bin\SogouInput\SpeedMeter.pdb
Static task
static1
Behavioral task
behavioral1
Sample
168fe70b551a48df2fc1d2accfc647f0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
168fe70b551a48df2fc1d2accfc647f0_JaffaCakes118
-
Size
346KB
-
MD5
168fe70b551a48df2fc1d2accfc647f0
-
SHA1
45017a294693e1b3739e51ae6d12bde17aba2f0a
-
SHA256
6baf97ad012b6a6eccad7d3de41628a446f38177f513d29cc25afd65dba05cb8
-
SHA512
486310c374b0bc80ee9305e690fab82c8059d75a5bb674e0249bf57a98391d5d58d6062b08e0a9e394da438d15e486a7ea5afba4b02471da69e2c917a853eb41
-
SSDEEP
6144:CbmSdV72Gdl0QCm/vfhb/Smncwk6Nl/fb+SAIw5SxLf5VgSeLJXeqo:YmSdhNZpjpc56Nl/fJ5qSeL0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 168fe70b551a48df2fc1d2accfc647f0_JaffaCakes118
Files
-
168fe70b551a48df2fc1d2accfc647f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7af306180c09bba31ef93a9417ce2ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GetProcAddress
GetTickCount
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetSystemDefaultLangID
SetStdHandle
GetLastError
WideCharToMultiByte
GlobalAlloc
GlobalFree
CreateEventW
FormatMessageW
SetFilePointer
WaitForMultipleObjects
GetModuleFileNameW
CreateFileW
CreateProcessW
ExitThread
GetCurrentProcess
GetCurrentThreadId
DuplicateHandle
SetLastError
CloseHandle
WriteFile
LocalFree
CreateThread
CreateMutexW
ReleaseMutex
WaitForSingleObject
OpenMutexW
GetTempPathW
GetCommandLineW
GetModuleHandleW
GetCurrentProcessId
DeleteFileW
SetFileAttributesW
CopyFileW
FileTimeToSystemTime
MoveFileExW
CreateDirectoryW
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
InterlockedIncrement
InterlockedCompareExchange
MultiByteToWideChar
GlobalUnlock
GlobalLock
GetSystemDirectoryW
FindClose
RemoveDirectoryW
FindNextFileW
FindFirstFileW
LocalAlloc
Sleep
ReadFile
FlushFileBuffers
GetFileSize
HeapReAlloc
HeapAlloc
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetVersionExA
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
FileTimeToLocalFileTime
GetDriveTypeW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetFullPathNameW
GetCurrentDirectoryA
InitializeCriticalSection
LoadLibraryA
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
user32
SetWindowPos
IsWindowEnabled
InvalidateRect
SetWindowLongW
DestroyWindow
CreateDialogParamW
DialogBoxParamW
GetSystemMetrics
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetWindowDC
EndDialog
SetWindowTextW
ScrollWindow
ReleaseDC
DrawTextW
GetWindow
GetWindowTextLengthW
GetWindowLongW
GetClientRect
SetTimer
GetFocus
BeginPaint
CallWindowProcW
DefWindowProcW
GetDC
TrackMouseEvent
EndPaint
ScreenToClient
GetWindowRect
LoadIconW
SendMessageW
GetWindowTextW
MessageBoxW
GetDlgItem
FindWindowW
ShowWindow
SetForegroundWindow
IsIconic
GetClassNameW
gdi32
CreateFontW
SelectObject
SetBkColor
BitBlt
MoveToEx
GetTextExtentPoint32W
CreateDIBSection
LineTo
CreateFontIndirectW
SetBkMode
RoundRect
DeleteObject
CreatePen
Ellipse
CreateSolidBrush
GetStockObject
CreateCompatibleDC
Rectangle
PolyBezier
CreateCompatibleBitmap
SetTextColor
msimg32
GradientFill
AlphaBlend
imm32
ImmDisableIME
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
advapi32
LookupAccountSidW
RegCreateKeyExW
GetTokenInformation
OpenProcessToken
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
InitializeAcl
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAceEx
BuildExplicitAccessWithNameW
GetSecurityDescriptorSacl
GetSidLengthRequired
SetEntriesInAclW
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
shell32
SHFileOperationW
SHGetSpecialFolderPathW
comctl32
InitCommonControlsEx
Sections
.text Size: 233KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE