d:\qb396\InstallMSI\QuickBooksLaunch\Release\QuickBooksLaunch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
047dcf9a632500f11d862e1a37d796f4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
047dcf9a632500f11d862e1a37d796f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
047dcf9a632500f11d862e1a37d796f4_JaffaCakes118
-
Size
104KB
-
MD5
047dcf9a632500f11d862e1a37d796f4
-
SHA1
acf90e42437dbcfed0c6a0a46a34b5f4f95af695
-
SHA256
6f95eceae3c045175ef11c108a1a8beefcc605eb00dc2ddcdc48edf5973981a2
-
SHA512
13aac2b3b76c54a48136f4228268d9c9b410264063f7de7d2e2c27720114dee1a2a2c272e77bdeac343c38647a3c21d1203f3e7c9115db0e2f3525555d1f8a11
-
SSDEEP
1536:5U1sB1o4baZuMlE5Up8Y3aiN6cil3ooC6NNwqkUYsbU:+1ruDvGjWl3qcSFU3bU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 047dcf9a632500f11d862e1a37d796f4_JaffaCakes118
Files
-
047dcf9a632500f11d862e1a37d796f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
174b587d85ddff5c143b12c57e1fae92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetPrivateProfileIntA
WaitForSingleObject
CloseHandle
OutputDebugStringA
CreateProcessA
GetModuleFileNameA
SetEndOfFile
SetStdHandle
LoadLibraryA
CreateFileA
FlushFileBuffers
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
InterlockedExchange
Sleep
RtlUnwind
GetLocalTime
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
GetProcAddress
TerminateProcess
GetCurrentProcess
RaiseException
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
HeapReAlloc
HeapSize
GetACP
GetOEMCP
GetCPInfo
WriteFile
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
ReadFile
user32
LoadStringA
CreateDialogParamA
LoadIconA
SendMessageA
MonitorFromWindow
GetMonitorInfoA
GetWindowRect
SetWindowPos
SetTimer
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
GetDlgItem
SetWindowTextA
EnumThreadWindows
PostQuitMessage
IsWindowVisible
GetClassNameA
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE