D:\Build\desktop_apps\_out\launcher.pdb
Static task
static1
Behavioral task
behavioral1
Sample
159616bba74ae9b981062df4e254f1d5_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
159616bba74ae9b981062df4e254f1d5_JaffaCakes118
-
Size
170KB
-
MD5
159616bba74ae9b981062df4e254f1d5
-
SHA1
3c8e2ad3fd1e10146e86b6f26525474d85fe90b9
-
SHA256
d29bd0f6a2ef5d71750cc3f3394a0e2a4313263e0819ad64a2ae5f0fc32991cf
-
SHA512
54f95d0cda4a480b52d2a21e74f427c0b46e9651ff33a7bb1580efd4bbdad86ae8cf6efbcebb60a7714cc3fdc1a1f972adb5a09194076646c83bbbb177b669ec
-
SSDEEP
3072:+5ERKdsNSE8jWf+FnGevgjFA+WzmLpJhJ4RpS:+wB8qonGeoFA0lyp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 159616bba74ae9b981062df4e254f1d5_JaffaCakes118
Files
-
159616bba74ae9b981062df4e254f1d5_JaffaCakes118.exe windows:5 windows x86 arch:x86
4d6634768ec87e8f2e6ce3c9ec9a57fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WriteFile
ReadFile
CreateDirectoryW
CreateFileW
GetLastError
GetTickCount
GetTempPathW
GetTempFileNameW
RemoveDirectoryW
DeleteFileW
GetModuleFileNameW
GetFileSize
LockFileEx
UnlockFile
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetEvent
Sleep
CreateEventW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetACP
GetModuleHandleW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
EncodePointer
RtlUnwind
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCPInfo
CreateProcessW
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsProcessorFeaturePresent
LCMapStringW
ExitProcess
IsDebuggerPresent
GetCurrentThreadId
OutputDebugStringW
LoadLibraryExW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
SetFilePointerEx
IsValidCodePage
GetOEMCP
SetStdHandle
FreeLibrary
FormatMessageA
GetModuleHandleA
LoadLibraryW
CloseHandle
WaitForSingleObject
UnhandledExceptionFilter
GetProcAddress
LoadLibraryExA
shell32
SHGetFolderPathW
ws2_32
ntohl
advapi32
CryptDestroyKey
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptReleaseContext
CryptDestroyHash
CryptVerifySignatureW
ole32
CoTaskMemFree
StringFromCLSID
CoCreateGuid
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ