nieiinitie.pdb
Static task
static1
Behavioral task
behavioral1
Sample
19f657f3831090e58185fd7700188ed8_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19f657f3831090e58185fd7700188ed8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
19f657f3831090e58185fd7700188ed8_JaffaCakes118
-
Size
70KB
-
MD5
19f657f3831090e58185fd7700188ed8
-
SHA1
30511ef03add124f80026e7cf50334129ab3051d
-
SHA256
7eed390600649bcfd77994823267f5c27a793695c4c563a5779be977f006cc97
-
SHA512
04fe6b2334d29bc204cca6c85442ed4d3fc84fb1fe847e9adf5b4e10fb52764caa8d3db3a3668424e883e5ab728b6f967ccd9107813c0b89a2d5645d64386c26
-
SSDEEP
768:iTp2zy2iW6TYYu+bncIc5EJQiaBxeRBYNhjbnAmxofwlBKxII0yGZK7ZJCoduk+T:i12m2itYFsncIc5a9SKYr1seEGIrS73
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19f657f3831090e58185fd7700188ed8_JaffaCakes118
Files
-
19f657f3831090e58185fd7700188ed8_JaffaCakes118.dll windows:4 windows x86 arch:x86
994f61f0e7f3f826bca28c1cf77b2a82
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
Sleep
GetModuleHandleW
GetModuleHandleA
GetProcAddress
GetLastError
OpenProcess
CreateRemoteThread
GetCurrentProcess
SetUnhandledExceptionFilter
CloseHandle
UnhandledExceptionFilter
user32
CheckMenuItem
advapi32
AdjustTokenPrivileges
OpenProcessToken
Exports
Exports
rieeur
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 540B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ