D:\Build\desktop_apps\_out\launcher.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6df6b7eb9058cf3ec89a12c4a30794b2_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
6df6b7eb9058cf3ec89a12c4a30794b2_JaffaCakes118
-
Size
170KB
-
MD5
6df6b7eb9058cf3ec89a12c4a30794b2
-
SHA1
2d77228ad7a96f97dc38419337ee1d62989cd1ce
-
SHA256
1fc3beb0307055946dba12c09b6878d3da2f7b0cee54f6cbe93efe3c764a1539
-
SHA512
548a420b7c5b9a9d33687543e638c41fd24495116b10fc53a3048b89e098d0549fc175f4a131704ef5bc17e05685ef2f584f8f860ed7d838b4f698a37392c754
-
SSDEEP
3072:+5ERKdsNSE8jWf+FnGevgjFA+WzmLpJhJ4RpS:+wB8qonGeoFA0lyp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6df6b7eb9058cf3ec89a12c4a30794b2_JaffaCakes118
Files
-
6df6b7eb9058cf3ec89a12c4a30794b2_JaffaCakes118.exe windows:5 windows x86 arch:x86
4d6634768ec87e8f2e6ce3c9ec9a57fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WriteFile
ReadFile
CreateDirectoryW
CreateFileW
GetLastError
GetTickCount
GetTempPathW
GetTempFileNameW
RemoveDirectoryW
DeleteFileW
GetModuleFileNameW
GetFileSize
LockFileEx
UnlockFile
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetEvent
Sleep
CreateEventW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetACP
GetModuleHandleW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
EncodePointer
RtlUnwind
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCPInfo
CreateProcessW
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsProcessorFeaturePresent
LCMapStringW
ExitProcess
IsDebuggerPresent
GetCurrentThreadId
OutputDebugStringW
LoadLibraryExW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
SetFilePointerEx
IsValidCodePage
GetOEMCP
SetStdHandle
FreeLibrary
FormatMessageA
GetModuleHandleA
LoadLibraryW
CloseHandle
WaitForSingleObject
UnhandledExceptionFilter
GetProcAddress
LoadLibraryExA
shell32
SHGetFolderPathW
ws2_32
ntohl
advapi32
CryptDestroyKey
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptReleaseContext
CryptDestroyHash
CryptVerifySignatureW
ole32
CoTaskMemFree
StringFromCLSID
CoCreateGuid
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ