hpz5rlhn.pdb
Static task
static1
Behavioral task
behavioral1
Sample
758bf8f8e168c4c21262e71b73955c7b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
758bf8f8e168c4c21262e71b73955c7b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
758bf8f8e168c4c21262e71b73955c7b_JaffaCakes118
-
Size
214KB
-
MD5
758bf8f8e168c4c21262e71b73955c7b
-
SHA1
9a6497fefdaab1c3c84b2a6c6a3cf396fa2a736c
-
SHA256
19b27c7265334d152489af9025964506368dc83ccc877e94cfd81398df808857
-
SHA512
4bed5c4ca762099f457c8f4763414bc9ab3d63bd815ae9917acd2a6622ae2e6533372359b5dd61886755bf90013f79c18ac90e6904ba0d3795cd2f3bd8ec659b
-
SSDEEP
6144:C5iTBzOnU7pdYUNyx3xEI4DUhezrW0O3D6Z:nTB660UNyxhVhACx3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 758bf8f8e168c4c21262e71b73955c7b_JaffaCakes118
Files
-
758bf8f8e168c4c21262e71b73955c7b_JaffaCakes118.dll windows:6 windows x86 arch:x86
2bc5bcc3ff139962e4db5e86e1856b29
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
__CxxFrameHandler
_strnicmp
_adjust_fdiv
_amsg_exit
_initterm
free
_XcptFilter
atoi
strchr
isalpha
??2@YAPAXI@Z
_wtol
_vsnwprintf
malloc
wcstok
_wtoi
_wcsupr
wcsstr
_wcsicmp
memcpy
memset
??3@YAXPAX@Z
wcschr
_CIatan
_wcsrev
_hypot
_CIsqrt
_CIsin
_CIcos
wcsrchr
_itoa
wcsncmp
_time64
wcstod
atof
_strupr
_purecall
ceil
wcsncpy
strstr
_ultoa
_ltoa
_strlwr
_CIatan2
_vsnprintf
gdi32
GetCharWidth32W
GetTextExtentPoint32W
DeleteObject
SelectObject
CreateFontIndirectW
GetFontData
GetGlyphOutlineW
GetTextMetricsW
FONTOBJ_pifi
EngUnicodeToMultiByteN
STROBJ_vEnumStart
STROBJ_bEnum
FONTOBJ_cGetGlyphs
EngCreateBitmap
EngLockSurface
EngUnlockSurface
EngDeleteSurface
BRUSHOBJ_pvAllocRbrush
XLATEOBJ_iXlate
XLATEOBJ_piVector
EngStretchBltROP
EngBitBlt
EngStretchBlt
XFORMOBJ_bApplyXform
EngTransparentBlt
EngPlgBlt
XFORMOBJ_iGetXform
BRUSHOBJ_pvGetRbrush
CLIPOBJ_cEnumStart
CLIPOBJ_bEnum
PATHOBJ_vEnumStart
PATHOBJ_bEnum
CLIPOBJ_ppoGetPath
EngCreateClip
EngGradientFill
EngAlphaBlend
EngCreatePalette
EngDeletePalette
winspool.drv
GetPrinterDataW
EnumPrintProcessorDatatypesW
SetPrinterDataW
DeletePrinterDataW
GetPrinterDataExW
ClosePrinter
OpenPrinterW
GetPrinterDriverW
GetJobW
DeviceCapabilitiesW
EnumFormsW
GetPrinterW
kernel32
SystemTimeToTzSpecificLocalTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
InterlockedExchange
MulDiv
GetUserDefaultLangID
Sleep
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
GetVersion
FindResourceExW
LoadResource
EnumResourceTypesW
LoadLibraryW
FreeLibrary
GetProcAddress
GetLongPathNameW
EnumResourceNamesW
SystemTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
EnumResourceLanguagesW
LoadLibraryExW
GetCurrentProcessId
GetDateFormatW
GetModuleFileNameW
GetLocaleInfoW
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
GetLastError
LocalAlloc
LocalFree
SetLastError
GetUserDefaultUILanguage
advapi32
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
GetUserNameW
RegCloseKey
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
user32
GetDC
ReleaseDC
CharUpperW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
oleaut32
SysAllocString
SysStringLen
SysFreeString
rpcrt4
RpcStringFreeW
UuidToStringW
UuidCreate
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ