C:\BUILD_~1\jdk6_17\control\build\WINDOW~1\tmp\sun\java.util.zip\zip\obj\zip.pdb
Static task
static1
Behavioral task
behavioral1
Sample
60ca79d1f553ea17c6d1e98b97b11d55_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
60ca79d1f553ea17c6d1e98b97b11d55_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
60ca79d1f553ea17c6d1e98b97b11d55_JaffaCakes118
-
Size
214KB
-
MD5
60ca79d1f553ea17c6d1e98b97b11d55
-
SHA1
7ce7c3a4c400c1e39eebc1335ecddcd6b699ba1d
-
SHA256
f5eca71bb01700cbc59f40ab3c8492885067feef119b4520d17322c5cbbf643d
-
SHA512
dc104690e22795101854afe56e06ae28c093aebff3121a2c5652cf3d0ffdf2be00feeba0e161ea7f54962bedb683ce00dbdfd3926751100894cc71933112b2e7
-
SSDEEP
3072:xOeJu01+YPSL9rCOV229ntRERrir85cSaFjS84GpAuDH2tVesM60rpp7VTJqr:xvrlS5rCONEtigmvFjS58FKVeJnRJq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60ca79d1f553ea17c6d1e98b97b11d55_JaffaCakes118
Files
-
60ca79d1f553ea17c6d1e98b97b11d55_JaffaCakes118.dll windows:4 windows x86 arch:x86
7bb9a9da8c52ee1a42541958d87076d2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
java
_JNU_ThrowIOExceptionWithLastError@8
_JNU_ThrowIllegalArgumentException@8
_JNU_ThrowInternalError@8
_JNU_ThrowNullPointerException@8
_JNU_ThrowByName@12
JNU_NewObjectByName
_JNU_NewStringPlatform@8
jio_fprintf
handleLseek
handleRead
_JNU_ThrowOutOfMemoryError@8
_JNU_GetStringPlatformChars@12
winFileHandleOpen
_JNU_ReleaseStringPlatformChars@12
jvm
_JVM_RawMonitorExit@4
_JVM_RawMonitorEnter@4
_JVM_NativePath@4
_JVM_RawMonitorDestroy@4
_JVM_GetLastErrorString@8
_JVM_RawMonitorCreate@0
msvcr71
malloc
_onexit
__dllonexit
_except_handler3
__CppXcptFilter
_adjust_fdiv
_initterm
strerror
_iob
strlen
strcpy
strcmp
realloc
memset
memcpy
sprintf
_errno
free
calloc
_strdup
_assert
kernel32
DisableThreadLibraryCalls
CloseHandle
CreateFileA
Exports
Exports
ZIP_CRC32
ZIP_Close
ZIP_FindEntry
ZIP_GetNextEntry
ZIP_Open
ZIP_ReadEntry
_Java_java_util_jar_JarFile_getMetaInfEntryNames@8
_Java_java_util_zip_Adler32_update@16
_Java_java_util_zip_Adler32_updateBytes@24
_Java_java_util_zip_CRC32_update@16
_Java_java_util_zip_CRC32_updateBytes@24
_Java_java_util_zip_Deflater_deflateBytes@20
_Java_java_util_zip_Deflater_end@16
_Java_java_util_zip_Deflater_getAdler@16
_Java_java_util_zip_Deflater_getBytesRead@16
_Java_java_util_zip_Deflater_getBytesWritten@16
_Java_java_util_zip_Deflater_init@20
_Java_java_util_zip_Deflater_initIDs@8
_Java_java_util_zip_Deflater_reset@16
_Java_java_util_zip_Deflater_setDictionary@28
_Java_java_util_zip_Inflater_end@16
_Java_java_util_zip_Inflater_getAdler@16
_Java_java_util_zip_Inflater_getBytesRead@16
_Java_java_util_zip_Inflater_getBytesWritten@16
_Java_java_util_zip_Inflater_inflateBytes@20
_Java_java_util_zip_Inflater_init@12
_Java_java_util_zip_Inflater_initIDs@8
_Java_java_util_zip_Inflater_reset@16
_Java_java_util_zip_Inflater_setDictionary@28
_Java_java_util_zip_ZipEntry_initFields@16
_Java_java_util_zip_ZipEntry_initIDs@8
_Java_java_util_zip_ZipFile_close@16
_Java_java_util_zip_ZipFile_freeEntry@24
_Java_java_util_zip_ZipFile_getCSize@16
_Java_java_util_zip_ZipFile_getEntry@24
_Java_java_util_zip_ZipFile_getMethod@16
_Java_java_util_zip_ZipFile_getNextEntry@20
_Java_java_util_zip_ZipFile_getSize@16
_Java_java_util_zip_ZipFile_getTotal@16
_Java_java_util_zip_ZipFile_getZipMessage@16
_Java_java_util_zip_ZipFile_initIDs@8
_Java_java_util_zip_ZipFile_open@24
_Java_java_util_zip_ZipFile_read@44
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ