O:\OOO330\ooo\i18npool\wntmsci12.pro\bin\localedata_en.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2e27ff87601e03094576cf8490fb711c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e27ff87601e03094576cf8490fb711c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2e27ff87601e03094576cf8490fb711c_JaffaCakes118
-
Size
101KB
-
MD5
2e27ff87601e03094576cf8490fb711c
-
SHA1
9f867d027f1c850c76ae47240e061111378c1d78
-
SHA256
5526e19ba04ae5dd0d0c3b68e9e81c456f27af09a2817f1bbf555e5ff2071224
-
SHA512
bded89613fc799be4bdf3337589360f22598e3a72688e872a3bca053d68214dcd54a07215a036d9e6651a79e64ab1ea74c0928a498e9631df1679deca7d9cf6c
-
SSDEEP
768:UN9kac2Kyitrkpmnhir1rFtM5UGozVdEhXLpaUUEsQVtncnhir1LV1k5E/YxVd2l:ASFtREwi9S+o7+a64uc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e27ff87601e03094576cf8490fb711c_JaffaCakes118
Files
-
2e27ff87601e03094576cf8490fb711c_JaffaCakes118.dll windows:5 windows x86 arch:x86
1ee86a608d231b83dca35006d3b58ed8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcr90
_except_handler4_common
_onexit
_crt_debugger_hook
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
Exports
Exports
GetVersionInfo
getAllCalendars_en_AU
getAllCalendars_en_BZ
getAllCalendars_en_CA
getAllCalendars_en_GB
getAllCalendars_en_GH
getAllCalendars_en_IE
getAllCalendars_en_JM
getAllCalendars_en_NA
getAllCalendars_en_NZ
getAllCalendars_en_PH
getAllCalendars_en_TT
getAllCalendars_en_US
getAllCalendars_en_ZA
getAllCalendars_en_ZW
getAllCurrencies_en_AU
getAllCurrencies_en_BZ
getAllCurrencies_en_CA
getAllCurrencies_en_GB
getAllCurrencies_en_GH
getAllCurrencies_en_IE
getAllCurrencies_en_JM
getAllCurrencies_en_NA
getAllCurrencies_en_NZ
getAllCurrencies_en_PH
getAllCurrencies_en_TT
getAllCurrencies_en_US
getAllCurrencies_en_ZA
getAllCurrencies_en_ZW
getAllFormats0_en_AU
getAllFormats0_en_BZ
getAllFormats0_en_CA
getAllFormats0_en_GB
getAllFormats0_en_GH
getAllFormats0_en_IE
getAllFormats0_en_JM
getAllFormats0_en_NA
getAllFormats0_en_NZ
getAllFormats0_en_PH
getAllFormats0_en_TT
getAllFormats0_en_US
getAllFormats0_en_ZA
getAllFormats0_en_ZW
getAllFormats1_en_US
getBreakIteratorRules_en_AU
getBreakIteratorRules_en_BZ
getBreakIteratorRules_en_CA
getBreakIteratorRules_en_GB
getBreakIteratorRules_en_GH
getBreakIteratorRules_en_IE
getBreakIteratorRules_en_JM
getBreakIteratorRules_en_NA
getBreakIteratorRules_en_NZ
getBreakIteratorRules_en_PH
getBreakIteratorRules_en_TT
getBreakIteratorRules_en_US
getBreakIteratorRules_en_ZA
getBreakIteratorRules_en_ZW
getCollationOptions_en_AU
getCollationOptions_en_BZ
getCollationOptions_en_CA
getCollationOptions_en_GB
getCollationOptions_en_GH
getCollationOptions_en_IE
getCollationOptions_en_JM
getCollationOptions_en_NA
getCollationOptions_en_NZ
getCollationOptions_en_PH
getCollationOptions_en_TT
getCollationOptions_en_US
getCollationOptions_en_ZA
getCollationOptions_en_ZW
getCollatorImplementation_en_AU
getCollatorImplementation_en_BZ
getCollatorImplementation_en_CA
getCollatorImplementation_en_GB
getCollatorImplementation_en_GH
getCollatorImplementation_en_IE
getCollatorImplementation_en_JM
getCollatorImplementation_en_NA
getCollatorImplementation_en_NZ
getCollatorImplementation_en_PH
getCollatorImplementation_en_TT
getCollatorImplementation_en_US
getCollatorImplementation_en_ZA
getCollatorImplementation_en_ZW
getContinuousNumberingLevels_en_AU
getContinuousNumberingLevels_en_BZ
getContinuousNumberingLevels_en_CA
getContinuousNumberingLevels_en_GB
getContinuousNumberingLevels_en_GH
getContinuousNumberingLevels_en_IE
getContinuousNumberingLevels_en_JM
getContinuousNumberingLevels_en_NA
getContinuousNumberingLevels_en_NZ
getContinuousNumberingLevels_en_PH
getContinuousNumberingLevels_en_TT
getContinuousNumberingLevels_en_US
getContinuousNumberingLevels_en_ZA
getContinuousNumberingLevels_en_ZW
getFollowPageWords_en_AU
getFollowPageWords_en_BZ
getFollowPageWords_en_CA
getFollowPageWords_en_GB
getFollowPageWords_en_GH
getFollowPageWords_en_IE
getFollowPageWords_en_JM
getFollowPageWords_en_NA
getFollowPageWords_en_NZ
getFollowPageWords_en_PH
getFollowPageWords_en_TT
getFollowPageWords_en_US
getFollowPageWords_en_ZA
getFollowPageWords_en_ZW
getForbiddenCharacters_en_AU
getForbiddenCharacters_en_BZ
getForbiddenCharacters_en_CA
getForbiddenCharacters_en_GB
getForbiddenCharacters_en_GH
getForbiddenCharacters_en_IE
getForbiddenCharacters_en_JM
getForbiddenCharacters_en_NA
getForbiddenCharacters_en_NZ
getForbiddenCharacters_en_PH
getForbiddenCharacters_en_TT
getForbiddenCharacters_en_US
getForbiddenCharacters_en_ZA
getForbiddenCharacters_en_ZW
getIndexAlgorithm_en_AU
getIndexAlgorithm_en_BZ
getIndexAlgorithm_en_CA
getIndexAlgorithm_en_GB
getIndexAlgorithm_en_GH
getIndexAlgorithm_en_IE
getIndexAlgorithm_en_JM
getIndexAlgorithm_en_NA
getIndexAlgorithm_en_NZ
getIndexAlgorithm_en_PH
getIndexAlgorithm_en_TT
getIndexAlgorithm_en_US
getIndexAlgorithm_en_ZA
getIndexAlgorithm_en_ZW
getLCInfo_en_AU
getLCInfo_en_BZ
getLCInfo_en_CA
getLCInfo_en_GB
getLCInfo_en_GH
getLCInfo_en_IE
getLCInfo_en_JM
getLCInfo_en_NA
getLCInfo_en_NZ
getLCInfo_en_PH
getLCInfo_en_TT
getLCInfo_en_US
getLCInfo_en_ZA
getLCInfo_en_ZW
getLocaleItem_en_AU
getLocaleItem_en_BZ
getLocaleItem_en_CA
getLocaleItem_en_GB
getLocaleItem_en_GH
getLocaleItem_en_IE
getLocaleItem_en_JM
getLocaleItem_en_NA
getLocaleItem_en_NZ
getLocaleItem_en_PH
getLocaleItem_en_TT
getLocaleItem_en_US
getLocaleItem_en_ZA
getLocaleItem_en_ZW
getOutlineNumberingLevels_en_AU
getOutlineNumberingLevels_en_BZ
getOutlineNumberingLevels_en_CA
getOutlineNumberingLevels_en_GB
getOutlineNumberingLevels_en_GH
getOutlineNumberingLevels_en_IE
getOutlineNumberingLevels_en_JM
getOutlineNumberingLevels_en_NA
getOutlineNumberingLevels_en_NZ
getOutlineNumberingLevels_en_PH
getOutlineNumberingLevels_en_TT
getOutlineNumberingLevels_en_US
getOutlineNumberingLevels_en_ZA
getOutlineNumberingLevels_en_ZW
getReservedWords_en_AU
getReservedWords_en_BZ
getReservedWords_en_CA
getReservedWords_en_GB
getReservedWords_en_GH
getReservedWords_en_IE
getReservedWords_en_JM
getReservedWords_en_NA
getReservedWords_en_NZ
getReservedWords_en_PH
getReservedWords_en_TT
getReservedWords_en_US
getReservedWords_en_ZA
getReservedWords_en_ZW
getSearchOptions_en_AU
getSearchOptions_en_BZ
getSearchOptions_en_CA
getSearchOptions_en_GB
getSearchOptions_en_GH
getSearchOptions_en_IE
getSearchOptions_en_JM
getSearchOptions_en_NA
getSearchOptions_en_NZ
getSearchOptions_en_PH
getSearchOptions_en_TT
getSearchOptions_en_US
getSearchOptions_en_ZA
getSearchOptions_en_ZW
getTransliterations_en_AU
getTransliterations_en_BZ
getTransliterations_en_CA
getTransliterations_en_GB
getTransliterations_en_GH
getTransliterations_en_IE
getTransliterations_en_JM
getTransliterations_en_NA
getTransliterations_en_NZ
getTransliterations_en_PH
getTransliterations_en_TT
getTransliterations_en_US
getTransliterations_en_ZA
getTransliterations_en_ZW
getUnicodeScripts_en_AU
getUnicodeScripts_en_BZ
getUnicodeScripts_en_CA
getUnicodeScripts_en_GB
getUnicodeScripts_en_GH
getUnicodeScripts_en_IE
getUnicodeScripts_en_JM
getUnicodeScripts_en_NA
getUnicodeScripts_en_NZ
getUnicodeScripts_en_PH
getUnicodeScripts_en_TT
getUnicodeScripts_en_US
getUnicodeScripts_en_ZA
getUnicodeScripts_en_ZW
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ