f:\project\down_new\rubbish\dnloaerc\Release\dnloaderc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7138c41c455b4aee295462e4dc1aad01_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7138c41c455b4aee295462e4dc1aad01_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
7138c41c455b4aee295462e4dc1aad01_JaffaCakes118
-
Size
32KB
-
MD5
7138c41c455b4aee295462e4dc1aad01
-
SHA1
3105cdcd610db1768240a5f898fa0779b66d35d9
-
SHA256
ec5c69fa787322a87406ccca82749adb7db594e405fbd615f08212eaf143a5b8
-
SHA512
19176e005896f29eaaf0d2e8050787cb2977f8126f6b14708861bdb95d89cd26164c484942f42bf1d2d86f7c14479e60d37ef6eaf870162edfe952d500e01c37
-
SSDEEP
192:6ySHmWHlTrDr/kGRYdFXxfXYQz6XToh5IKuUvQMaUgF/Zf7OyYuVDDj29mA:3QmYPfYSDXkh5I/+5aUoCyYUDDymA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7138c41c455b4aee295462e4dc1aad01_JaffaCakes118
Files
-
7138c41c455b4aee295462e4dc1aad01_JaffaCakes118.dll windows:4 windows x86 arch:x86
ecda680086f3968386ad5e0d4412aa89
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CreateFileA
GetTempPathA
ReleaseMutex
WriteFile
CreateMutexA
WaitForSingleObject
OpenMutexA
FreeLibrary
GetLastError
GetProcAddress
LoadLibraryA
SetFilePointer
GetSystemDirectoryA
HeapFree
DeleteFileA
HeapAlloc
GetProcessHeap
Sleep
GetFileSize
CreateProcessA
GetStartupInfoA
WaitForMultipleObjects
GetModuleFileNameA
GetModuleHandleA
CreateThread
GlobalAlloc
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
WideCharToMultiByte
CreateEventA
GetStdHandle
ReadFile
CloseHandle
GetLocalTime
GetSystemTimeAsFileTime
ws2_32
WSCEnumProtocols
WSCGetProviderPath
user32
wsprintfA
wvsprintfA
Exports
Exports
WSPStartup
attach
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ