D:\Build\desktop_apps\_out\launcher.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7d0f20114aab77c24422669496f92051_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
7d0f20114aab77c24422669496f92051_JaffaCakes118
-
Size
170KB
-
MD5
7d0f20114aab77c24422669496f92051
-
SHA1
67ecabc22748285915ec6b4a6327803aee4245d6
-
SHA256
2974d51ee56136ff43ab5d0625430da216435e38ab35e21f695787b0268abd4f
-
SHA512
43626205b5d8454b64e20d75a0c11086ee2b203e47e5e3184a9317d280e4f93b839e9d2c9d28fd526a13e5143639c2857a19d153a5eb64b200acbaac07e5ba77
-
SSDEEP
3072:+5ERKdsNSE8jWf+FnGevgjFA+WzmLpJhJ4RpS:+wB8qonGeoFA0lyp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d0f20114aab77c24422669496f92051_JaffaCakes118
Files
-
7d0f20114aab77c24422669496f92051_JaffaCakes118.exe windows:5 windows x86 arch:x86
4d6634768ec87e8f2e6ce3c9ec9a57fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WriteFile
ReadFile
CreateDirectoryW
CreateFileW
GetLastError
GetTickCount
GetTempPathW
GetTempFileNameW
RemoveDirectoryW
DeleteFileW
GetModuleFileNameW
GetFileSize
LockFileEx
UnlockFile
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetEvent
Sleep
CreateEventW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetACP
GetModuleHandleW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
EncodePointer
RtlUnwind
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCPInfo
CreateProcessW
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsProcessorFeaturePresent
LCMapStringW
ExitProcess
IsDebuggerPresent
GetCurrentThreadId
OutputDebugStringW
LoadLibraryExW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
SetFilePointerEx
IsValidCodePage
GetOEMCP
SetStdHandle
FreeLibrary
FormatMessageA
GetModuleHandleA
LoadLibraryW
CloseHandle
WaitForSingleObject
UnhandledExceptionFilter
GetProcAddress
LoadLibraryExA
shell32
SHGetFolderPathW
ws2_32
ntohl
advapi32
CryptDestroyKey
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptReleaseContext
CryptDestroyHash
CryptVerifySignatureW
ole32
CoTaskMemFree
StringFromCLSID
CoCreateGuid
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ