c:\b\build\slave\chrome-official\build\src\build\Release\chrome_launcher.pdb
Static task
static1
Behavioral task
behavioral1
Sample
003bd017bfb1e2cf356d203cd4a626b8_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
003bd017bfb1e2cf356d203cd4a626b8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
003bd017bfb1e2cf356d203cd4a626b8_JaffaCakes118
-
Size
163KB
-
MD5
003bd017bfb1e2cf356d203cd4a626b8
-
SHA1
d0cd45b7587ff7cb5ce06977b3591ca06b084130
-
SHA256
b6d21fafd0f6e5a2b967af2e87eabf0d364f004bc8ec309c81da397aa762c615
-
SHA512
ca9934d458fdb034aef6e854be95a5054c32e7f4466959d3956496b44255fa168797dc3c1f5f424d41eebdca8761a0fa4b1f3eaa3d59c2662aaae542d24ad644
-
SSDEEP
3072:8Sxq5BDL2cochyyZ+0xm+1UxpisUrlwNoXP4XTY3SOuLDpYO:8SxyDLLphyyZxdEBKCPXc3SOuJYO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 003bd017bfb1e2cf356d203cd4a626b8_JaffaCakes118
Files
-
003bd017bfb1e2cf356d203cd4a626b8_JaffaCakes118.exe windows:5 windows x86 arch:x86
d90083c8eb7bd1bdbd1a828b76ab834d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathRemoveFileSpecW
PathFileExistsW
PathAppendW
PathGetArgsW
kernel32
GetCommandLineW
CreateProcessW
GetModuleFileNameW
lstrlenW
CloseHandle
WaitForSingleObject
GetExitCodeProcess
GetCurrentProcessId
LocalFree
CreateFileA
GetCurrentProcess
GetTempPathW
ReleaseSemaphore
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
VirtualQuery
CreateFileW
InterlockedDecrement
DeleteCriticalSection
SetUnhandledExceptionFilter
FreeLibrary
RtlCaptureContext
GetProcAddress
LoadLibraryW
CreateThread
CreateSemaphoreW
InitializeCriticalSection
InterlockedIncrement
WaitNamedPipeW
GetLastError
WaitForMultipleObjects
SetEvent
ResetEvent
WriteFile
TransactNamedPipe
SetNamedPipeHandleState
LocalAlloc
InterlockedExchange
LoadLibraryA
RaiseException
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
Sleep
ExitProcess
RtlUnwind
HeapFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
VirtualAlloc
HeapReAlloc
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
ole32
CoUninitialize
CoInitialize
CoCreateInstance
advapi32
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidW
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rrdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE