msoxmled.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7926116330476f3ec399eeeecd79b336.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_7926116330476f3ec399eeeecd79b336
-
Size
555KB
-
MD5
7926116330476f3ec399eeeecd79b336
-
SHA1
171aa97b58acf6dcce6c6291e02a9109174e4349
-
SHA256
144f6470837679a8b27956f907eaf659f1d82adc5ce2e4d0419bc9d49b141d2b
-
SHA512
b4da90493fc31161ebf14ecf0b2750c73a4ac2853d3ecb8234b1c98db7b265aafa010ec5fd363a555d47d9502c2290e234fcf6f93ca6d2bfe17002851ae96956
-
SSDEEP
12288:YzfNXtgwut1cLl4prQnKugkc7rBIP875U+QoX:mswutCl4p87gF71IY5U+Qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7926116330476f3ec399eeeecd79b336
Files
-
JaffaCakes118_7926116330476f3ec399eeeecd79b336.exe windows:4 windows x86 arch:x86
ac65f8e90033dd042968c09aaae45cd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetParent
DdeInitializeW
DdeCreateStringHandleW
DdeClientTransaction
DdeUninitialize
CharLowerW
IsCharAlphaW
DdeConnectList
DdeQueryNextServer
DdeQueryConvInfo
AllowSetForegroundWindow
IsIconic
ShowWindow
SetForegroundWindow
DdeFreeDataHandle
DdeFreeStringHandle
DdeDisconnectList
kernel32
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoA
ExitProcess
GlobalFree
GetLastError
GetCommandLineW
CreateProcessW
GlobalAlloc
CloseHandle
MultiByteToWideChar
GetACP
ReadFile
CreateFileW
lstrlenW
GetModuleHandleA
GetSystemTimeAsFileTime
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteW
CommandLineToArgvW
ShellExecuteExW
shlwapi
AssocQueryStringW
StrCmpIW
AssocQueryStringByKeyW
PathCreateFromUrlW
UrlIsW
StrCmpNIW
PathFindFileNameW
StrToIntExW
StrStrW
StrChrW
StrCmpW
PathFindExtensionW
wininet
GetUrlCacheEntryInfoW
CreateUrlCacheEntryW
urlmon
URLDownloadToFileW
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_c_exit
_exit
_XcptFilter
_ismbblead
_except_handler3
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 508KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE