d:\400\Release\ashShell.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7247e7fe02e3b259c39e1083cc780653_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7247e7fe02e3b259c39e1083cc780653_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
7247e7fe02e3b259c39e1083cc780653_JaffaCakes118
-
Size
13KB
-
MD5
7247e7fe02e3b259c39e1083cc780653
-
SHA1
6aa5afed62835b7ffced71774141af8ae2687ca3
-
SHA256
c17eea8d18a2d9b01a8474b4d0c20447f85dde759130c2cfa36d696b2edb40e3
-
SHA512
d15f564d208c386f7b0befe535c03b5badcab5135dcaf4a7e9b3b5a8dede6f556b80f211c3b31721991139393eed11e3e995be1927f231ff6da7cd245415843f
-
SSDEEP
192:gI9WRe9YAV3rcRecLXibQ54Ycx0iFZP4te1B/AToLY10:gI90e9YAV3rcRLXia4DFFeej4ToLG0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7247e7fe02e3b259c39e1083cc780653_JaffaCakes118
Files
-
7247e7fe02e3b259c39e1083cc780653_JaffaCakes118.dll windows:4 windows x86 arch:x86
bd4b2be2e6831903fbe27449a5c8c3a1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetPrivateProfileStringA
GetPrivateProfileIntA
MultiByteToWideChar
GetShortPathNameA
GetVersion
lstrcpyA
lstrcpyW
lstrlenA
lstrlenW
CreateProcessA
GetLocaleInfoA
CreateProcessW
GetShortPathNameW
WideCharToMultiByte
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetSystemTimeAsFileTime
LoadLibraryExA
FreeLibrary
CloseHandle
GetLastError
user32
wsprintfW
LoadStringW
LoadStringA
InsertMenuA
InsertMenuW
SetMenuItemBitmaps
wsprintfA
LoadBitmapA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
shell32
DragQueryFileA
DragQueryFileW
ole32
ReleaseStgMedium
msvcp71
?_Nomemory@std@@YAXXZ
msvcr71
__CxxFrameHandler
__dllonexit
__CppXcptFilter
_adjust_fdiv
_initterm
free
memcmp
_mbschr
_mbsrchr
setlocale
_getmbcp
strcpy
strcat
??3@YAXPAX@Z
strlen
memmove
wcschr
memcpy
wcslen
wcsrchr
memset
??_V@YAXPAX@Z
malloc
_callnewh
__security_error_handler
_except_handler3
_onexit
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ