d:\Build1\TUU2011-Update-3\Tools\ApplicationLauncher\Release\ApplicationLauncher.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b0ad7a906d60f8063064f7157420b1d4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b0ad7a906d60f8063064f7157420b1d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0ad7a906d60f8063064f7157420b1d4_JaffaCakes118
-
Size
9KB
-
MD5
b0ad7a906d60f8063064f7157420b1d4
-
SHA1
d65e578f1b0d9fd3d1d25063b772ceb7d22deaed
-
SHA256
4051a8569995ebd1dc66024f7cc5de45777a5a709d303a0b4e911c7525625f2d
-
SHA512
d49e44b4d552c7eafa6644b926602456db686311bc05b93fbb3a5d04cd5f38c2d2c04ff83cd10ab6a8d49216cb24ef0bc8701d9592d34d997c357b82cc243095
-
SSDEEP
96:PVt4nvE//vCttxifvR2KnlTkqs1IHbFQ7vE0/OGo2fi2VpH8PjfjKejC:PVtGE/GTWNpkqs1IRkvE01o2fbpaWe2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0ad7a906d60f8063064f7157420b1d4_JaffaCakes118
Files
-
b0ad7a906d60f8063064f7157420b1d4_JaffaCakes118.exe windows:5 windows x86 arch:x86
b47ba1f3855cc391fef220fab42afc93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ExitProcess
GetCommandLineW
GetModuleHandleW
LocalAlloc
LocalFree
user32
MessageBoxW
shell32
CommandLineToArgvW
ShellExecuteW
Sections
.text Size: 512B - Virtual size: 471B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 529B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ