url.pdb
Static task
static1
Behavioral task
behavioral1
Sample
241782f918ee05176c3fa6cc5f055f41_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
241782f918ee05176c3fa6cc5f055f41_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
241782f918ee05176c3fa6cc5f055f41_JaffaCakes118
-
Size
201KB
-
MD5
241782f918ee05176c3fa6cc5f055f41
-
SHA1
41c1616527c06f6474461978fc870a916ba24f64
-
SHA256
f4806581598814f556d9be5930721011dfdf3df8f45fce69cdcfb34d4f0ace2a
-
SHA512
167b9603dd061601dc0a9dd5d9bd1692cab7f17adf4a9cb6086d796ff8bdc5955ba908069fb182d36e7479d2f9955163dec6637e7c8684b0982c3a231d2cff42
-
SSDEEP
3072:nfDMg+zsExpjKXYwjSBO1Zi66gcEsQzuNeviq+iLSknHhUcBZAY/b:nfDvmvr1OSB+i66gwNX7CBa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 241782f918ee05176c3fa6cc5f055f41_JaffaCakes118
Files
-
241782f918ee05176c3fa6cc5f055f41_JaffaCakes118.dll windows:6 windows x86 arch:x86
1be83118cc4fadedcd49476f707ad2fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
memmove
memset
kernel32
LocalAlloc
RaiseException
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
SetLastError
GetSystemWindowsDirectoryA
lstrlenA
GetProfileStringA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
user32
CharNextA
CharPrevA
shell32
ord102
ShellExecuteA
iertutil
ord9
shlwapi
PathCreateFromUrlA
ord1
StrChrA
StrCmpNIA
ieframe
URLQualifyW
URLQualifyA
Exports
Exports
AddMIMEFileTypesPS
AutodialHookCallback
FileProtocolHandler
FileProtocolHandlerA
InetIsOffline
MIMEAssociationDialogA
MIMEAssociationDialogW
MailToProtocolHandler
MailToProtocolHandlerA
OpenURL
OpenURLA
TelnetProtocolHandler
TelnetProtocolHandlerA
TranslateURLA
TranslateURLW
URLAssociationDialogA
URLAssociationDialogW
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 412B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ