O:\EAiaDpl\srUOv\iStifmQ\QzwX.pdb
Static task
static1
Behavioral task
behavioral1
Sample
300101e2fb93fbc7a65d305f9cec1e3d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
300101e2fb93fbc7a65d305f9cec1e3d_JaffaCakes118.dll
Resource
win10v2004-20240708-en
General
-
Target
300101e2fb93fbc7a65d305f9cec1e3d_JaffaCakes118
-
Size
111KB
-
MD5
300101e2fb93fbc7a65d305f9cec1e3d
-
SHA1
bfce5a2f05de3c505669d628f606e4fbf706ad18
-
SHA256
bf071606438c38e2b023a937ae0bda13f7acff8be8e4c5fbf6d9b7a86312a0d1
-
SHA512
bbe32642930ab474f2ac324cc1ef4e202934088c15826406652037264955c5b07ae3a1437c68b7eebd0c62f9f423d6ebf14c31fde456e11d9dd1f0376771c870
-
SSDEEP
1536:WWHDH+3lV0at8tZVGfba8eJmMUYd+BMu0WrM9jYEksyWmbapPic1NmAgH:jjHE0ZVv3J+BMNyM9jYL0PgH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 300101e2fb93fbc7a65d305f9cec1e3d_JaffaCakes118
Files
-
300101e2fb93fbc7a65d305f9cec1e3d_JaffaCakes118.dll windows:5 windows x86 arch:x86
0e80e810cc2f07d82890473574abbc0c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
comdlg32
GetSaveFileNameA
GetOpenFileNameA
PrintDlgW
comctl32
CreatePropertySheetPageW
ImageList_GetImageCount
user32
KillTimer
LookupIconIdFromDirectory
DialogBoxParamW
RegisterWindowMessageW
GetWindowLongW
IsCharUpperA
GetMessageW
LoadMenuA
EnableWindow
GetPropW
ShowScrollBar
GetKeyboardLayout
HiliteMenuItem
shlwapi
StrCmpNW
gdi32
PatBlt
CreateDiscardableBitmap
PtVisible
LineDDA
GetViewportOrgEx
CreateDCW
EndDoc
SetDIBColorTable
GetBkMode
kernel32
HeapSize
GetProcAddress
GlobalGetAtomNameW
lstrcmpiW
LoadLibraryW
GetThreadContext
GetFullPathNameA
CancelWaitableTimer
lstrlenW
CreateEventA
SetHandleInformation
GlobalFindAtomW
Exports
Exports
?qBcdkgP@@YGDDJ@Z
?TguhmbnLRh@@YGXFK@Z
?pqHjdtYmanwryCBBx@@YGPAMN@Z
?Xocnnjsuqcpb@@YGPAKME@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 190B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ