pdb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5f6577023acea926ce0a7381db5423ac_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f6577023acea926ce0a7381db5423ac_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5f6577023acea926ce0a7381db5423ac_JaffaCakes118
-
Size
72KB
-
MD5
5f6577023acea926ce0a7381db5423ac
-
SHA1
b50b1a629e032a10f05cdebdc0fb1ea1be158171
-
SHA256
ac475e0dd597264688895d56b60d1a1f56d80610a0d8b8a9d18b00f10d2c1c5a
-
SHA512
f983d021328b310d50eeeea049a92140507b0510380c686155f39df3e3a520008037648d97cb5ebc9103b94392f898a208680a33078c94ede95c9348624286c7
-
SSDEEP
1536:HNCDb6yC9Qh1PBFagNzs2M49lLQWM/ni/MyspPHxRZQiRJ:tgrEQh1PBFagzs2M49u2MyOPH7aiRJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f6577023acea926ce0a7381db5423ac_JaffaCakes118
Files
-
5f6577023acea926ce0a7381db5423ac_JaffaCakes118.dll windows:4 windows x86 arch:x86
e6e00f4c0d58cc356384192ab7a38e0a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetStringTypeA
lstrlenW
LCMapStringA
CreateFileA
UnmapViewOfFile
WaitForSingleObject
LocalFree
IsDBCSLeadByte
DeleteFileA
VirtualProtect
CreateMutexA
VirtualAlloc
GetStringTypeW
MultiByteToWideChar
HeapDestroy
SetFileTime
TlsAlloc
WriteFile
CreateFileW
SetHandleCount
CreateFileMappingW
MapViewOfFile
FreeEnvironmentStringsW
DisableThreadLibraryCalls
GetTickCount
GetStartupInfoA
GetSystemTimeAsFileTime
Sleep
OpenFileMappingA
VirtualFree
InitializeCriticalSectionAndSpinCount
GetFileSize
CloseHandle
HeapCreate
GetFullPathNameW
TerminateProcess
GetACP
GetStringTypeExA
QueryPerformanceCounter
DeleteFileW
lstrcmpA
InterlockedDecrement
HeapFree
FlushViewOfFile
WideCharToMultiByte
CreateMutexW
MoveFileA
GetEnvironmentVariableA
VirtualQuery
UnhandledExceptionFilter
HeapReAlloc
GetCurrentProcess
GetDiskFreeSpaceW
GetVersionExA
GetLastError
GetStdHandle
InitializeCriticalSection
InterlockedIncrement
GetFullPathNameA
OpenFileMappingW
TlsFree
GetCPInfo
GetSystemInfo
TlsGetValue
GetCurrentProcessId
ReleaseMutex
GetCurrentThreadId
GetProcAddress
FreeEnvironmentStringsA
GetLocaleInfoA
MoveFileW
IsBadReadPtr
SetFilePointer
GetEnvironmentStrings
LeaveCriticalSection
GetOEMCP
HeapAlloc
lstrlenA
CreateFileMappingA
GetFileType
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetDiskFreeSpaceA
InterlockedExchange
DeleteCriticalSection
lstrcmpiA
CreateThread
EnterCriticalSection
CompareFileTime
SetEvent
SetEndOfFile
LocalAlloc
FreeLibrary
LoadLibraryA
CreateEventA
SetLastError
MoveFileWithProgressA
Exports
Exports
dtrx
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 542B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ