winshfhc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2852db5db80100c7ec8bbe4dc7a8a7ed_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2852db5db80100c7ec8bbe4dc7a8a7ed_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2852db5db80100c7ec8bbe4dc7a8a7ed_JaffaCakes118
-
Size
128KB
-
MD5
2852db5db80100c7ec8bbe4dc7a8a7ed
-
SHA1
1e9edae8823a8d77fb2df1efdd6a8ee38b57c6d7
-
SHA256
28102e4481a916ee344ecf40e00df1bcb875c76f31a6013b9d4691f926fc51f6
-
SHA512
35a4599de098e0a8dcd5bf3acb104c1f003be7a20c6d8faefa83ce68d98148d74e1403635ab4ca13ba162e1b895db12cb0e6166343c9e323418078d419a2b87d
-
SSDEEP
3072:5TYIU9rudTGXjwiHvBQBT5rM9vnQkMlPdscoP14xHhBr3l9+pEsITF8IHabCl5LB:5I4pYqc4o7tyN6Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2852db5db80100c7ec8bbe4dc7a8a7ed_JaffaCakes118
Files
-
2852db5db80100c7ec8bbe4dc7a8a7ed_JaffaCakes118.dll windows:5 windows x86 arch:x86
d8816e4733e6840a3d60e564156d1cc7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
free
towupper
_except_handler3
malloc
kernel32
GetFileSizeEx
SetFilePointerEx
GetLastError
HeapDestroy
UnmapViewOfFile
HeapCreate
MapViewOfFile
CloseHandle
CreateFileMappingW
ReadFile
CreateFileW
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
SetFilePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileSize
GetCurrentProcess
ole32
CoCreateInstance
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
shlwapi
PathFindFileNameW
wmvcore
WMCreateEditor
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 718B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ