SPFLVRNT.pdb
Static task
static1
Behavioral task
behavioral1
Sample
21de8f65b6ca84d6314329b318d5d55d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21de8f65b6ca84d6314329b318d5d55d_JaffaCakes118.dll
Resource
win10v2004-20240419-en
General
-
Target
21de8f65b6ca84d6314329b318d5d55d_JaffaCakes118
-
Size
22KB
-
MD5
21de8f65b6ca84d6314329b318d5d55d
-
SHA1
b5e81b4d25526926713f77a307f39cd08199ef47
-
SHA256
8e4016038889042e277bf419cf4f1326b8c5b4687563d34a5d853c059d242567
-
SHA512
43342b8dc657e4e30f0e8da8baef48b6c77a542ab0bead9427b43c5a19dd7fd3d266312f54036de82ca8062e291f6ae5b637e0ecb904c1709ce1cb2ee43f323b
-
SSDEEP
384:yHLDX7egHvVt6OIRE8QD36JjAxjqfXYvpkMOpr72EI5VyN+1gqEP2A:yrDX95IRE5DxjqfXYvFWW5g+KqEx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21de8f65b6ca84d6314329b318d5d55d_JaffaCakes118
Files
-
21de8f65b6ca84d6314329b318d5d55d_JaffaCakes118.dll windows:6 windows x86 arch:x86
db837d60c76538d2ada6a9f30e82e827
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
memcpy
_onexit
__dllonexit
_unlock
realloc
_amsg_exit
_initterm
_XcptFilter
_errno
_lock
??_V@YAXPAX@Z
??2@YAPAXI@Z
malloc
free
memset
??_U@YAPAXI@Z
??3@YAXPAX@Z
user32
CharNextW
UnregisterClassA
oleaut32
VarUI4FromStr
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
OutputDebugStringA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetVersionExA
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
lstrcmpiW
GetModuleHandleW
GetProcAddress
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
GetLastError
LeaveCriticalSection
EnterCriticalSection
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
win32ui
?bDownlevel@PantherInterface@@2HA
ole32
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
advapi32
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
Exports
Exports
GetPersonality
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ