D:\Build\desktop_apps\_out\launcher.pdb
Static task
static1
Behavioral task
behavioral1
Sample
848919ae0853d6a563f00d0c878941fa_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
848919ae0853d6a563f00d0c878941fa_JaffaCakes118
-
Size
170KB
-
MD5
848919ae0853d6a563f00d0c878941fa
-
SHA1
a114ac188d0081e7ddcdb5c11fa089934045a6b6
-
SHA256
f25d4eaa30c6fbe4f118dc68dca5f65c08d9ed535195a4410f0c97d798a1e960
-
SHA512
b2066790e8bed9261daabe70c6cc67ea9d6f796c50ec1e04105b8168a5f8640675edeeb56328477f07537d9859c73b8db0d974bba8ea6985625036c376b95610
-
SSDEEP
3072:+5ERKdsNSE8jWf+FnGevgjFA+WzmLpJhJ4RpS:+wB8qonGeoFA0lyp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 848919ae0853d6a563f00d0c878941fa_JaffaCakes118
Files
-
848919ae0853d6a563f00d0c878941fa_JaffaCakes118.exe windows:5 windows x86 arch:x86
4d6634768ec87e8f2e6ce3c9ec9a57fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WriteFile
ReadFile
CreateDirectoryW
CreateFileW
GetLastError
GetTickCount
GetTempPathW
GetTempFileNameW
RemoveDirectoryW
DeleteFileW
GetModuleFileNameW
GetFileSize
LockFileEx
UnlockFile
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetEvent
Sleep
CreateEventW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetACP
GetModuleHandleW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
EncodePointer
RtlUnwind
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCPInfo
CreateProcessW
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsProcessorFeaturePresent
LCMapStringW
ExitProcess
IsDebuggerPresent
GetCurrentThreadId
OutputDebugStringW
LoadLibraryExW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
SetFilePointerEx
IsValidCodePage
GetOEMCP
SetStdHandle
FreeLibrary
FormatMessageA
GetModuleHandleA
LoadLibraryW
CloseHandle
WaitForSingleObject
UnhandledExceptionFilter
GetProcAddress
LoadLibraryExA
shell32
SHGetFolderPathW
ws2_32
ntohl
advapi32
CryptDestroyKey
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptReleaseContext
CryptDestroyHash
CryptVerifySignatureW
ole32
CoTaskMemFree
StringFromCLSID
CoCreateGuid
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ