J:\xgxoQlnjzbaLyR\xsqPvgU\blSUHlNxkiugyo\vImpxhxqKywJ\rowiblEgzbfHxI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1a14e78d9b8cbeceae20bac185fbf323_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a14e78d9b8cbeceae20bac185fbf323_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1a14e78d9b8cbeceae20bac185fbf323_JaffaCakes118
-
Size
52KB
-
MD5
1a14e78d9b8cbeceae20bac185fbf323
-
SHA1
23a56ea5a130711f76bb282a729567bd8ad7fd0a
-
SHA256
4256c727c408c731960e581356e9db3caacd70f1a963c764d646dcbbfa11203a
-
SHA512
a40b0a91f6392cf574674905c91f0f274640f72a3f15150e23d34e30fc24ca5f28cab6b9a446f67b5e3ecc1ce1296b7a12530e00878fc6b5547af3092fd8164c
-
SSDEEP
1536:BmCliFgkJrwpOZzu8fIFbje8PTYakTeP:XlkgkiwHfQjPPT9k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a14e78d9b8cbeceae20bac185fbf323_JaffaCakes118
Files
-
1a14e78d9b8cbeceae20bac185fbf323_JaffaCakes118.dll windows:5 windows x86 arch:x86
137a9b4a6059d8b53e3c9d8dbb713fc9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
gdi32
CreateRectRgn
GetRgnBox
kernel32
CreateFileMappingW
GlobalMemoryStatusEx
GetModuleFileNameW
GetComputerNameA
EnumResourceNamesW
VirtualProtect
CloseHandle
user32
SetWindowTextW
MonitorFromPoint
DefWindowProcA
GetUpdateRgn
TranslateAcceleratorA
SetMenuDefaultItem
TrackPopupMenuEx
WaitForInputIdle
SetFocus
AdjustWindowRect
EnableMenuItem
IsWindowEnabled
CopyRect
SetRectEmpty
FindWindowExA
ntdll
RtlCompareMemory
Exports
Exports
?TemporaryArrayCre
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE