f:\project\down_new\rubbish\dnloaerc\Release\dnloaderc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2441719ded8eb4e3b92dbfb2133555d7_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2441719ded8eb4e3b92dbfb2133555d7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
2441719ded8eb4e3b92dbfb2133555d7_JaffaCakes118
-
Size
16KB
-
MD5
2441719ded8eb4e3b92dbfb2133555d7
-
SHA1
0ee90a6010d7aac9b6e1d5d90f474f556f5e94a6
-
SHA256
4dc0f8f73e8838703f2c1d9cd233b150c911d5b48cbd8afb083d15a13167aa93
-
SHA512
f5073694e51ac6333e0ae2e3f76f7a97c5b18c762e075efc2b76d6437f6ab4c3f465d83642ccbd443944ad7b1edc165b34e298809ab2c3241b7d02508ffd82ae
-
SSDEEP
384:zipmQ50ln094aU5iCMGaX0DLDPfG3ZRR:zipR5I09jVCMd0DfG3P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2441719ded8eb4e3b92dbfb2133555d7_JaffaCakes118
Files
-
2441719ded8eb4e3b92dbfb2133555d7_JaffaCakes118.dll windows:4 windows x86 arch:x86
2265bc6022c342ab5700e57cfb8e5ece
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CreateFileA
GetSystemDirectoryA
HeapFree
DeleteFileA
ReadFile
HeapAlloc
GetProcessHeap
Sleep
GetLocalTime
WaitForSingleObject
CreateProcessA
GetStartupInfoA
CreatePipe
WriteFile
GetLastError
GetProcAddress
LoadLibraryA
FreeLibrary
GetTempPathA
WaitForMultipleObjects
CreateThread
GlobalAlloc
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
WideCharToMultiByte
CreateEventA
GetFileSize
SetFilePointer
CloseHandle
ws2_32
WSCGetProviderPath
WSCEnumProtocols
user32
wsprintfA
wvsprintfA
Exports
Exports
WSPStartup
attach
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ