nmft.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2f8f6ab9c63a0be464af8df1ce7423fc_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f8f6ab9c63a0be464af8df1ce7423fc_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2f8f6ab9c63a0be464af8df1ce7423fc_JaffaCakes118
-
Size
248KB
-
MD5
2f8f6ab9c63a0be464af8df1ce7423fc
-
SHA1
906f1bee0783b330b2c802a1d2b1f3f04e9a9abb
-
SHA256
1f054fc822d2af9337d4cb79244ec510cde26605e19fd8197fdf2dc329a9bc20
-
SHA512
8d31f81e49ab87dcb2cbeef32dd84e07cbb9fa8828206bbdce770eb98ce75c917d6e4aafa459b1c7384a483e5d590a37500ca7a4ae22882c9b3baa45c4d30355
-
SSDEEP
3072:nJBgrkCArGF875u5ksrta03u4RAk1NISbEY1asw5LCdXes7Ef:JBgrVArGaQ5ksrt33HdNcY1h0ANI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f8f6ab9c63a0be464af8df1ce7423fc_JaffaCakes118
Files
-
2f8f6ab9c63a0be464af8df1ce7423fc_JaffaCakes118.dll windows:5 windows x86 arch:x86
b2c835ce98e44b77c4e9b8fbada837ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
free
_initterm
_vsnprintf
malloc
_adjust_fdiv
kernel32
GetProcAddress
LoadLibraryA
lstrcmpA
VirtualAlloc
InterlockedDecrement
CreateThread
GetShortPathNameA
MultiByteToWideChar
CompareStringA
CompareFileTime
GetNumberFormatA
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
SetCurrentDirectoryA
GetCurrentDirectoryA
QueryPerformanceCounter
CreateEventA
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
LocalFree
lstrcatA
SetErrorMode
CreateDirectoryA
FreeResource
LockResource
LoadResource
FindResourceA
WaitForSingleObject
lstrcpyA
DosDateTimeToFileTime
SetFileTime
GetFileInformationByHandle
FileTimeToDosDateTime
lstrlenA
GetFileSize
WriteFile
ReadFile
SetFilePointer
DeleteFileA
lstrcpynA
CreateFileA
GetLastError
EnterCriticalSection
LeaveCriticalSection
Sleep
FreeLibraryAndExitThread
SetEvent
DisableThreadLibraryCalls
InitializeCriticalSection
GetTickCount
GetCurrentProcessId
CloseHandle
DeleteCriticalSection
GetCurrentThreadId
advapi32
RegFlushKey
RegCreateKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
user32
GetWindowPlacement
SetWindowTextA
EnableMenuItem
GetMenu
IsIconic
IsZoomed
SetFocus
GetDlgItem
ReleaseDC
GetDC
SetWindowLongA
CreateDialogParamA
TranslateAcceleratorA
IsDialogMessageA
GetForegroundWindow
LoadImageA
GetParent
TrackPopupMenu
AppendMenuA
CreatePopupMenu
MessageBoxA
GetDlgCtrlID
SendDlgItemMessageA
DestroyIcon
UnregisterClassA
GetFocus
LoadAcceleratorsA
LoadIconA
GetTopWindow
PeekMessageA
AdjustWindowRectEx
PtInRect
GetMessagePos
GetSysColorBrush
SetWindowPos
GetWindow
EndPaint
DrawEdge
BeginPaint
MessageBeep
IsWindow
InvalidateRect
LoadCursorA
GetClassInfoA
RegisterWindowMessageA
FindWindowA
EndDeferWindowPos
BeginDeferWindowPos
GetWindowTextA
GetSysColor
IsWindowEnabled
DeferWindowPos
ShowWindow
SetForegroundWindow
SystemParametersInfoA
GetWindowLongA
MoveWindow
DialogBoxParamA
EndDialog
GetDlgItemTextA
SetDlgItemTextA
GetSubMenu
GetMenuItemID
DrawIconEx
GetWindowRect
EnableWindow
GetClientRect
SendMessageA
GetSystemMetrics
LoadStringA
CharNextA
CreateWindowExA
KillTimer
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostMessageA
DestroyWindow
wsprintfA
RegisterClassA
gdi32
SetTextColor
SetBkColor
GetDeviceCaps
GetSystemPaletteUse
GetSystemPaletteEntries
CreateCompatibleDC
SelectPalette
DeleteDC
GetTextExtentPointA
GetTextMetricsA
CreateDIBSection
RealizePalette
CreatePalette
BitBlt
SelectObject
PatBlt
CreateSolidBrush
GetStockObject
DeleteObject
GetTextExtentPoint32A
GetObjectA
shell32
SHGetSpecialFolderLocation
DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
DragAcceptFiles
ShellExecuteA
DragQueryFileA
comdlg32
GetOpenFileNameA
comctl32
ord17
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
mst120
T120_GetNodeVersion
T120_CreateAppletSAP
T120_AppletStatus
T120_GetNodeName
Exports
Exports
CreateAppletLoaderInterface
FT_CreateInterface
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ