C:\Users\Serhij\Documents\Visual Studio 2008\Projects\AVInstaller_2\Release\StageOne.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b0cd01188ddf471494668b3168c16b13_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b0cd01188ddf471494668b3168c16b13_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0cd01188ddf471494668b3168c16b13_JaffaCakes118
-
Size
63KB
-
MD5
b0cd01188ddf471494668b3168c16b13
-
SHA1
ca64e711d74e6cc47d60dc8edd110e077a71f679
-
SHA256
9234518388d01907147154677bf22c56980949f3f273a0a773dd6058d4bfbda0
-
SHA512
8e3e6ae1dffa59c41ae6d24d6656bb7691e6c155dbd9267ff38e54b682f422431c6940cdbaff7ace60055d5db91770b585c08836df024c0a220fac3e750e8839
-
SSDEEP
768:bsQN+qIuE92DKR7Yo/VLZjqh6E9ynTy8dwIk6F8cGz4p550BT0HpRt3YzDAr:bsbI22DKNL5sF9A1dP3GU55A0xozsr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0cd01188ddf471494668b3168c16b13_JaffaCakes118
Files
-
b0cd01188ddf471494668b3168c16b13_JaffaCakes118.exe windows:5 windows x86 arch:x86
72a8832a5e819e4b7f44165c0bbdf1a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetReadFile
InternetQueryDataAvailable
InternetErrorDlg
HttpSendRequestW
HttpOpenRequestW
InternetCloseHandle
InternetConnectW
InternetOpenW
shlwapi
PathAppendW
kernel32
GetStringTypeA
ExitProcess
CreateDirectoryW
GetLastError
CreateProcessW
CloseHandle
OpenMutexW
CreateMutexW
GetStringTypeW
GetModuleFileNameW
CreateFileW
SetFilePointer
ReadFile
WriteFile
WideCharToMultiByte
GetLocaleInfoA
LCMapStringA
LCMapStringW
MultiByteToWideChar
HeapReAlloc
HeapSize
IsValidCodePage
GetOEMCP
HeapAlloc
HeapFree
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
user32
MessageBoxW
LoadStringW
GetDesktopWindow
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegOpenCurrentUser
RegSetValueExA
shell32
SHGetFolderPathW
ord680
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ