C:\Proyectos\desktop_apps\MainExe_Installers\Installer\Debug\InstallerDebug.pdb
Static task
static1
Behavioral task
behavioral1
Sample
176cabc5cbc6d524d8c0672e71ff68db_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
176cabc5cbc6d524d8c0672e71ff68db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
176cabc5cbc6d524d8c0672e71ff68db_JaffaCakes118
-
Size
1.3MB
-
MD5
176cabc5cbc6d524d8c0672e71ff68db
-
SHA1
eadda3899a6b4a7a6ee81a168a5dab35d4633868
-
SHA256
865e01846a9ee85217782be0a072f326184cbd3d17fb00613d6fd522e024b7b2
-
SHA512
79ecd1827fc11b8d2f5404add1c0448d852adb890705b4e16127bbdcfee635fc0913cc49d9ef159045f1eaef1352f4897991e1b60d7b9b05e64e676b31b2d67b
-
SSDEEP
24576:aF/CYIvvTfFAsep1OyZ9XbWBl726FgEun6gFDhba4c7BgQTTE2Y0V76:aRRIvbe5O2Z63un6QJar6QTbYU2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 176cabc5cbc6d524d8c0672e71ff68db_JaffaCakes118
Files
-
176cabc5cbc6d524d8c0672e71ff68db_JaffaCakes118.exe windows:5 windows x86 arch:x86
9e76176900ad21f0e34da3109b543085
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateThread
GetLastError
WaitForSingleObject
Sleep
LoadResource
SizeofResource
GetFileSize
WriteFile
ReadFile
CloseHandle
GetModuleFileNameA
FindResourceA
CreateDirectoryA
CreateFileA
DeleteFileA
MoveFileA
SetFilePointer
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetCurrentDirectoryA
GetFileAttributesA
TerminateThread
ExitProcess
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
FreeLibrary
LoadLibraryW
LoadLibraryExW
OutputDebugStringW
GetTimeZoneInformation
SetConsoleCtrlHandler
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
SetFilePointerEx
GetFileType
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetProcessHeap
GetCurrentThreadId
GetCurrentThread
GetOEMCP
SetEndOfFile
LockResource
GetACP
IsValidCodePage
HeapSize
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedExchange
EncodePointer
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
InitializeCriticalSectionAndSpinCount
FatalAppExitA
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
AreFileApisANSI
SetEnvironmentVariableA
user32
InvalidateRect
MoveWindow
GetClassInfoA
RegisterClassA
wsprintfA
LoadStringA
LoadIconA
LoadCursorA
SetWindowLongA
GetWindowLongA
BeginPaint
UpdateWindow
GetSystemMetrics
TranslateAcceleratorA
LoadAcceleratorsA
ShowWindow
CreateWindowExA
RegisterClassExA
PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
EndPaint
gdi32
SetDIBitsToDevice
shell32
SHGetFolderPathA
ShellExecuteExA
Sections
.text Size: 489KB - Virtual size: 489KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ