D:\b\build\slave\chrome-official\build\src\build\Release\chrome_exe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d2290b6eea7469e3d15e7d378e88fa19_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2290b6eea7469e3d15e7d378e88fa19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2290b6eea7469e3d15e7d378e88fa19_JaffaCakes118
-
Size
1.0MB
-
MD5
d2290b6eea7469e3d15e7d378e88fa19
-
SHA1
e4a1420a463273812bfc96b163742cb231ec727f
-
SHA256
1d434ac647c3e12098173017c60bbf5c5c360d58f871f2ab44fb98c6a4f16884
-
SHA512
81543c1a0f86aad33cbbee559267e719424424574b59207e3516040edc3ec53250c4be492419951d5aee46f3e8bf4c758d6acfccaa58fa45bf552c2284d82742
-
SSDEEP
24576:l+OxuL6pDNEv9HpMgvJdkkkkkka4GghE4C4QPZ:EOxuLgNEXMgv2ga4C4C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2290b6eea7469e3d15e7d378e88fa19_JaffaCakes118
Files
-
d2290b6eea7469e3d15e7d378e88fa19_JaffaCakes118.exe windows:5 windows x86 arch:x86
c56b1b0438650be2d4927576824ec344
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LocalAlloc
GetModuleHandleA
SetCurrentDirectoryW
WaitForSingleObject
CreateEventW
ExpandEnvironmentStringsW
GetUserDefaultLangID
SetEnvironmentVariableW
GetCurrentProcess
FormatMessageW
GetVersionExW
GetLastError
CreateMutexW
SetFilePointer
GetTickCount
WriteFile
CreateFileW
SetLastError
GetCurrentThreadId
ReleaseMutex
GetCurrentProcessId
InterlockedExchange
RtlCaptureStackBackTrace
MapViewOfFile
UnmapViewOfFile
FreeLibrary
VirtualFree
GetFileAttributesW
ReadFile
GetCurrentDirectoryW
GetLongPathNameW
VirtualAlloc
CreateFileMappingW
QueryDosDeviceW
GetFileTime
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleW
GetSystemTimeAsFileTime
GetExitCodeProcess
TerminateProcess
GetStdHandle
HeapSetInformation
DuplicateHandle
GetProcAddress
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
RaiseException
CreateThread
QueryPerformanceCounter
GetSystemDirectoryW
GetWindowsDirectoryW
SetEndOfFile
FlushFileBuffers
SetInformationJobObject
GetQueuedCompletionStatus
SetEvent
InitializeCriticalSection
ResetEvent
PostQueuedCompletionStatus
CreateIoCompletionPort
TerminateJobObject
ResumeThread
SignalObjectAndWait
InterlockedIncrement
InterlockedDecrement
GetThreadContext
LoadLibraryW
AssignProcessToJobObject
WriteProcessMemory
RegisterWaitForSingleObject
UnregisterWaitEx
CreateJobObjectW
VirtualFreeEx
VirtualProtectEx
VirtualAllocEx
CreateNamedPipeW
OpenEventW
SearchPathW
DebugBreak
VirtualQuery
ReadProcessMemory
SuspendThread
ReleaseSemaphore
CreateSemaphoreW
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
WaitForMultipleObjects
WTSGetActiveConsoleSessionId
FindResourceW
LoadResource
GetLocaleInfoW
SizeofResource
GetThreadLocale
LockResource
UnhandledExceptionFilter
GetStartupInfoW
HeapFree
GetConsoleCP
GetConsoleMode
SetStdHandle
GetFileType
HeapReAlloc
HeapAlloc
GetProcessHeap
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapCreate
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
LoadLibraryA
GetStringTypeA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrlenW
GetModuleFileNameW
LoadLibraryExW
LocalFree
CloseHandle
QueueUserWorkItem
GetTempPathW
Sleep
InterlockedCompareExchange
SetUnhandledExceptionFilter
CreateProcessW
GetEnvironmentVariableW
GetCommandLineW
IsDebuggerPresent
ExitProcess
user32
MessageBoxW
CharUpperW
CloseDesktop
CloseWindowStation
CreateDesktopW
SetProcessWindowStation
GetThreadDesktop
CreateWindowStationW
GetProcessWindowStation
GetUserObjectInformationW
advapi32
OpenProcessToken
GetTokenInformation
GetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
ConvertSidToStringSidW
CreateWellKnownSid
CreateProcessAsUserW
GetTraceEnableFlags
SetSecurityDescriptorDacl
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
InitializeSecurityDescriptor
GetTraceLoggerHandle
ConvertSecurityDescriptorToStringSecurityDescriptorW
SetFileSecurityW
GetFileSecurityW
DuplicateTokenEx
LookupPrivilegeValueW
DuplicateToken
EqualSid
CreateRestrictedToken
CopySid
GetLengthSid
GetSecurityDescriptorSacl
ConvertStringSidToSidW
SetTokenInformation
SetThreadToken
RevertToSelf
RegDisablePredefinedCache
RegisterTraceGuidsW
GetTraceEnableLevel
UnregisterTraceGuids
TraceEvent
shell32
CommandLineToArgvW
SHGetFolderPathW
shlwapi
PathRemoveFileSpecW
PathFileExistsW
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
wtsapi32
WTSQueryUserToken
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Exports
Exports
DumpProcess
SetActiveURL
SetClientId
SetExtensionID
SetGpuInfo
SetNumberOfExtensions
SetNumberOfViews
Sections
.text Size: 400KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 407KB - Virtual size: 407KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.erdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE