dgeu3dnvp.c24
Static task
static1
Behavioral task
behavioral1
Sample
ff8a8f32fb35b3fd3e3003f2b11c2f17_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ff8a8f32fb35b3fd3e3003f2b11c2f17_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
ff8a8f32fb35b3fd3e3003f2b11c2f17_JaffaCakes118
-
Size
76KB
-
MD5
ff8a8f32fb35b3fd3e3003f2b11c2f17
-
SHA1
a102cbf79be666fe3000fabaa3f8dc328806889d
-
SHA256
e2e8517ba9a6f4be514a9be14898f32e6a4d4f0e499ba4ab24bc5c9506acb5ee
-
SHA512
8443fbd7e7ad6a30bcd7e2b1820179c7c9a07c798ba4f40ff070a8d07b0db6d4bbff1e93a176a7810a3d6680fca7e398d4180a88f9e03444688225952af36806
-
SSDEEP
1536:PYMfrvhMc/Jawx7m82rPhunGppXndULauakmUiAxO:PYMf7ht/Jawx7h2r8E9dyauVZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff8a8f32fb35b3fd3e3003f2b11c2f17_JaffaCakes118
Files
-
ff8a8f32fb35b3fd3e3003f2b11c2f17_JaffaCakes118.dll windows:4 windows x86 arch:x86
2c304f1ba1ef7e8e82557555be75711b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
LCMapStringW
IsBadWritePtr
TerminateProcess
VirtualQuery
GetFileType
CreateTimerQueueTimer
ReleaseMutex
GetACP
DisconnectNamedPipe
WriteFile
ConnectNamedPipe
GetModuleHandleA
IsBadCodePtr
GetSystemInfo
FreeEnvironmentStringsW
InterlockedExchangeAdd
InitializeCriticalSection
InterlockedDecrement
VirtualProtect
SetEvent
HeapAlloc
GetCPInfo
GetLocaleInfoA
GetCurrentProcessId
WaitForSingleObject
IsBadReadPtr
SetUnhandledExceptionFilter
GetStdHandle
InterlockedExchange
GetModuleFileNameA
GetCurrentThreadId
WideCharToMultiByte
DuplicateHandle
GetVersionExA
LoadLibraryA
CreateEventA
GetTickCount
GetLastError
ResetEvent
CreateNamedPipeA
UnmapViewOfFile
LeaveCriticalSection
GetSystemTimeAsFileTime
DeleteCriticalSection
CreateMutexW
GetOEMCP
HeapDestroy
LCMapStringA
CreateThread
GetEnvironmentStrings
GetEnvironmentStringsW
DeleteTimerQueueTimer
OpenProcess
RtlUnwind
SetLastError
WaitForMultipleObjects
HeapFree
InterlockedCompareExchange
UnhandledExceptionFilter
QueryPerformanceCounter
GetStartupInfoA
MultiByteToWideChar
lstrcpyW
FreeEnvironmentStringsA
ExitThread
GetBinaryTypeA
lstrcatW
Sleep
EnterCriticalSection
user32
LoadIconA
DrawIcon
CreateIconFromResource
wsprintfW
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
msvcrt
_stricmp
_strnicmp
_wcsnset
wcsstr
fprintf
fflush
realloc
wcsncmp
wcstol
wcstod
calloc
_wtoi
_ltow
wcstok
malloc
free
wcslen
wcschr
swprintf
wcscmp
fgetws
wcscat
wcscpy
isdigit
exit
vwprintf
strtok
towupper
wprintf
printf
memmove
memset
memcpy
scanf
Exports
Exports
mymre
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ