iccvid.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2758cd1538bbff6d49481895a0932684_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2758cd1538bbff6d49481895a0932684_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2758cd1538bbff6d49481895a0932684_JaffaCakes118
-
Size
250KB
-
MD5
2758cd1538bbff6d49481895a0932684
-
SHA1
86ccb108996f8126411e50fc53cd58ef87ec1f40
-
SHA256
1bc4d5ba3ddcb31a33837bcd87083d9fe40c64d74624ecac998bb3fa6a33e859
-
SHA512
7f97564a9c694ceb6776d0a04d6f925504ceaf0140024707afd3a55007853ff57f3b28c47e9f0dc18818d318076888f6a3536860f568cd7c1d1b215a45be915d
-
SSDEEP
6144:/0i3qGYXFtc4ZsTdBMMC3PYVyT1omJKiA7dxQVS58:T3qGY1tc4Z8dBJGPYVyO6XQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2758cd1538bbff6d49481895a0932684_JaffaCakes118
Files
-
2758cd1538bbff6d49481895a0932684_JaffaCakes118.dll windows:5 windows x86 arch:x86
457d216f4ab8abe4b92f831380df9a89
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntdll
RtlUnwind
user32
DialogBoxParamA
GetDC
ReleaseDC
EndDialog
SetWindowTextA
SendDlgItemMessageA
LoadStringA
LoadBitmapA
wsprintfA
EndPaint
GetWindowRect
GetDlgItem
BeginPaint
ScreenToClient
kernel32
VirtualQuery
InterlockedExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
LocalFree
MulDiv
GetPrivateProfileIntA
LocalAlloc
DebugBreak
lstrcatA
lstrcpyA
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
winmm
DefDriverProc
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
gdi32
GetSystemPaletteEntries
DeleteObject
GetObjectA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
Exports
Exports
DllInstanceInit
DriverProc
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ