L:\tvQgw\ntQp\rvnvMZjl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
48a01d5133431b20443d17538d788a2a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48a01d5133431b20443d17538d788a2a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
48a01d5133431b20443d17538d788a2a_JaffaCakes118
-
Size
180KB
-
MD5
48a01d5133431b20443d17538d788a2a
-
SHA1
c809dd11c1fd2f53d2d7dee7cf2048ab11179dc5
-
SHA256
c38e38403f862311e88f800679ca17f112c64f087a21e207e351e21a9c26e13b
-
SHA512
a3cafcb9a4b23ba94380ac9d31d16b84c5bb3ee054f9450ce7da398462faf56946cae793a4e844cce7325e2cec82eb62e8dfa184f822c12fccf75167f18472fe
-
SSDEEP
3072:8I01rSKnW/+QaicvH8XLpkgES6haJWm6M8y7h8rfQQL0omhzzPUQBdvoMykNDaHC:J0sKUaiG6t1OJihMfKpzUQBd9vNDw1G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48a01d5133431b20443d17538d788a2a_JaffaCakes118
Files
-
48a01d5133431b20443d17538d788a2a_JaffaCakes118.dll windows:5 windows x86 arch:x86
0d3d89f5237a2ce8f9ff87065fbdf85a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
GetWindowTextA
GetClassLongA
OpenDesktopW
GetMessageExtraInfo
RemovePropA
DrawIcon
GetClassLongW
GetDialogBaseUnits
IsCharAlphaNumericA
CreateWindowExW
DrawFrameControl
EnableScrollBar
DialogBoxParamW
InvertRect
shlwapi
StrCmpNIA
comctl32
ImageList_Destroy
PropertySheetA
gdi32
RoundRect
PathToRegion
PatBlt
EndPage
GetFontData
GetCharWidth32W
OffsetRgn
SetBrushOrgEx
CreateEllipticRgnIndirect
comdlg32
PrintDlgW
PrintDlgExW
ChooseColorW
kernel32
DeleteFileW
WaitForMultipleObjectsEx
CreateEventW
SetThreadAffinityMask
WaitForSingleObjectEx
GetTickCount
FormatMessageA
lstrlenA
CreateFileW
VirtualAlloc
GetThreadTimes
lstrcmpW
Exports
Exports
?euzAqSdTqapaJWTMirjg@@YGXGF@Z
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 98B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ