C:\BUILD_~1\jdk6_20\control\build\WINDOW~1\tmp\sun\java.util.zip\zip\obj\zip.pdb
Static task
static1
Behavioral task
behavioral1
Sample
59de619209ab56351359fe266449a1b3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59de619209ab56351359fe266449a1b3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
59de619209ab56351359fe266449a1b3_JaffaCakes118
-
Size
109KB
-
MD5
59de619209ab56351359fe266449a1b3
-
SHA1
087a6f4a69b4339284273f3be834e021f822c2d3
-
SHA256
5290b7bafbd4f875e08813be24333ec106debc9a0fac7efbf5b06373bd4d059a
-
SHA512
3448a83e4715b1866117c061220f3fe1e1bf2fa8ce84f5f16d06d5ff33cfe774acf82cd1c7b900170f181bee9a3e410a831af8b877262f38b2f401dcff446c31
-
SSDEEP
3072:lrYREEQXQ5PkiLyoBs4lQNT3yLk9g3G6Jtd:l8yQGoBsKQNF9g397d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59de619209ab56351359fe266449a1b3_JaffaCakes118
Files
-
59de619209ab56351359fe266449a1b3_JaffaCakes118.dll windows:4 windows x86 arch:x86
78e0ad1bf984af6bee7495eead6f42fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
java
handleRead
_JNU_ThrowIllegalArgumentException@8
_JNU_ThrowInternalError@8
_JNU_ThrowByName@12
JNU_NewObjectByName
_JNU_NewStringPlatform@8
_JNU_ReleaseStringPlatformChars@12
jio_fprintf
handleLseek
_JNU_ThrowOutOfMemoryError@8
_JNU_ThrowIOExceptionWithLastError@8
_JNU_GetStringPlatformChars@12
winFileHandleOpen
jvm
_JVM_RawMonitorExit@4
_JVM_RawMonitorEnter@4
_JVM_NativePath@4
_JVM_RawMonitorDestroy@4
_JVM_GetLastErrorString@8
_JVM_RawMonitorCreate@0
msvcr71
malloc
_onexit
__dllonexit
_except_handler3
__CppXcptFilter
_adjust_fdiv
_initterm
strerror
_iob
strlen
strcpy
strcmp
realloc
memset
memcpy
sprintf
free
calloc
_strdup
_assert
_errno
kernel32
DisableThreadLibraryCalls
CloseHandle
CreateFileA
Exports
Exports
ZIP_CRC32
ZIP_Close
ZIP_FindEntry
ZIP_GetNextEntry
ZIP_Open
ZIP_ReadEntry
_Java_java_util_jar_JarFile_getMetaInfEntryNames@8
_Java_java_util_zip_Adler32_update@16
_Java_java_util_zip_Adler32_updateBytes@24
_Java_java_util_zip_CRC32_update@16
_Java_java_util_zip_CRC32_updateBytes@24
_Java_java_util_zip_Deflater_deflateBytes@28
_Java_java_util_zip_Deflater_end@16
_Java_java_util_zip_Deflater_getAdler@16
_Java_java_util_zip_Deflater_getBytesRead@16
_Java_java_util_zip_Deflater_getBytesWritten@16
_Java_java_util_zip_Deflater_init@20
_Java_java_util_zip_Deflater_initIDs@8
_Java_java_util_zip_Deflater_reset@16
_Java_java_util_zip_Deflater_setDictionary@28
_Java_java_util_zip_Inflater_end@16
_Java_java_util_zip_Inflater_getAdler@16
_Java_java_util_zip_Inflater_getBytesRead@16
_Java_java_util_zip_Inflater_getBytesWritten@16
_Java_java_util_zip_Inflater_inflateBytes@28
_Java_java_util_zip_Inflater_init@12
_Java_java_util_zip_Inflater_initIDs@8
_Java_java_util_zip_Inflater_reset@16
_Java_java_util_zip_Inflater_setDictionary@28
_Java_java_util_zip_ZipEntry_initFields@16
_Java_java_util_zip_ZipEntry_initIDs@8
_Java_java_util_zip_ZipFile_close@16
_Java_java_util_zip_ZipFile_freeEntry@24
_Java_java_util_zip_ZipFile_getCSize@16
_Java_java_util_zip_ZipFile_getEntry@24
_Java_java_util_zip_ZipFile_getMethod@16
_Java_java_util_zip_ZipFile_getNextEntry@20
_Java_java_util_zip_ZipFile_getSize@16
_Java_java_util_zip_ZipFile_getTotal@16
_Java_java_util_zip_ZipFile_getZipMessage@16
_Java_java_util_zip_ZipFile_initIDs@8
_Java_java_util_zip_ZipFile_open@24
_Java_java_util_zip_ZipFile_read@44
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE