Static task
static1
Behavioral task
behavioral1
Sample
USBDumper2 - OK/bin/USBDumper2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
USBDumper2 - OK/bin/USBDumper2.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
USBDumper2 - OK/src/USBDumper2.html
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
USBDumper2 - OK/src/USBDumper2.html
Resource
win10v2004-20241007-en
General
-
Target
3e46174fc5213e70b1245281ebfe8012_JaffaCakes118
-
Size
120KB
-
MD5
3e46174fc5213e70b1245281ebfe8012
-
SHA1
6d329b16233d14fc3a6a84973e7f35514a64d8f9
-
SHA256
d3df406711db47b4b654da99bfe331da93895f55a63b9bfed6b69bed23eec7c8
-
SHA512
73308e32e80bd130066a24f9846870d9a814ab2b79f46932a5ab9422e54ba0452f01282ee55d81c0d20d2dc84875ff04d17aa083c0a1afb4a58e30de3c74052f
-
SSDEEP
1536:/bTB3oA7UJvFjSGYPPYvxw959SeCiTtgBVMRimF2nku4nX2O8Y0pil0/IAaVSxHq:/bTuXBuYvxc99CAMMRusX2P1MyeCSWSJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/USBDumper2 - OK/bin/USBDumper2.exe
Files
-
3e46174fc5213e70b1245281ebfe8012_JaffaCakes118.zip
-
USBDumper2 - OK/MacroExcel.txt
-
USBDumper2 - OK/MacroWord.txt
-
USBDumper2 - OK/README.txt
-
USBDumper2 - OK/autorun.inf
-
USBDumper2 - OK/bin/USBDumper2.exe.exe windows:4 windows x86 arch:x86
45722741beb1052e9c1c89cb5fb2dd48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
RtlUnwind
CreateDirectoryA
GetDriveTypeA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
RaiseException
HeapSize
GetACP
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
SetErrorMode
GetProfileStringA
GetOEMCP
GetCPInfo
SizeofResource
GetProcessVersion
GetLastError
GetCurrentDirectoryA
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedIncrement
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
HeapCreate
HeapAlloc
ReadFile
HeapReAlloc
GetLocalTime
FindFirstFileA
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle
FindNextFileA
FindClose
CopyFileA
VirtualAlloc
InterlockedDecrement
user32
IsDialogMessageA
SetWindowTextA
ShowWindow
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
DestroyMenu
InvalidateRect
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
LoadIconA
PostMessageA
SendMessageA
wsprintfA
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
UpdateWindow
GetCapture
SendDlgItemMessageA
GetParent
GetLastActivePopup
EnableWindow
PostQuitMessage
UnregisterClassA
HideCaret
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
IsWindowUnicode
CharNextA
InflateRect
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
GetDlgCtrlID
gdi32
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
RestoreDC
DeleteObject
SetViewportExtEx
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
CreateBitmap
SaveDC
PatBlt
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
SelectObject
comdlg32
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
comctl32
ord17
ole32
CoUninitialize
CLSIDFromProgID
CoInitialize
CoCreateInstance
oleaut32
SysFreeString
VariantClear
SysAllocString
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
USBDumper2 - OK/src/ReadMe.txt
-
USBDumper2 - OK/src/StdAfx.cpp
-
USBDumper2 - OK/src/StdAfx.h
-
USBDumper2 - OK/src/USBDumper2.aps
-
USBDumper2 - OK/src/USBDumper2.clw
-
USBDumper2 - OK/src/USBDumper2.cpp
-
USBDumper2 - OK/src/USBDumper2.dsp
-
USBDumper2 - OK/src/USBDumper2.dsw
-
USBDumper2 - OK/src/USBDumper2.h
-
USBDumper2 - OK/src/USBDumper2.ncb
-
USBDumper2 - OK/src/USBDumper2.opt
-
USBDumper2 - OK/src/USBDumper2.plg.html
-
USBDumper2 - OK/src/USBDumper2.rc
-
USBDumper2 - OK/src/USBDumper2Dlg.cpp
-
USBDumper2 - OK/src/USBDumper2Dlg.h
-
USBDumper2 - OK/src/res/USBDumper2.rc2
-
USBDumper2 - OK/src/resource.h