mydocs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
85c68287350456b03bdd4581a405dacc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
85c68287350456b03bdd4581a405dacc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
85c68287350456b03bdd4581a405dacc_JaffaCakes118
-
Size
240KB
-
MD5
85c68287350456b03bdd4581a405dacc
-
SHA1
651025feb52b0d1685477a03fda94ea54b7da5b3
-
SHA256
124ae19f84552e05042a838989ddb2407cf680c38a65082d2849d264be0d8feb
-
SHA512
693c6ab23b590a92b79fc78c788209735dde41ca6f03a173d9b9dc305b1ba11810ff055ee14d668375ecce8546cac6389437c4e45cc0eb9dd0e0f83da961011f
-
SSDEEP
6144:QY0b4a5XE5lPywAuM0+mswcTXCGTTXJWGoYXM:QzyTPywxM0LtBag
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85c68287350456b03bdd4581a405dacc_JaffaCakes118
Files
-
85c68287350456b03bdd4581a405dacc_JaffaCakes118.dll windows:5 windows x86 arch:x86
b6f10dcf949c6c7baa68d834ecd16341
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_adjust_fdiv
_initterm
free
_vsnwprintf
wcsstr
malloc
memmove
isdigit
mbstowcs
wcschr
swscanf
wcstombs
kernel32
Sleep
lstrcpynW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GetCurrentProcess
lstrcmpW
LocalFree
LocalAlloc
OpenFile
GetWindowsDirectoryW
MulDiv
GetModuleFileNameW
lstrcmpA
lstrcatW
GetModuleHandleA
MultiByteToWideChar
GetUserDefaultLCID
QueryPerformanceCounter
LoadLibraryA
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcpyW
GetFileAttributesW
ExpandEnvironmentStringsW
FindFirstFileW
FindClose
GetVersionExW
lstrlenA
SetLastError
GlobalFree
lstrlenW
CreateProcessA
GlobalReAlloc
GlobalAlloc
LoadLibraryW
GetProcAddress
GetLastError
FormatMessageW
FreeLibrary
CloseHandle
user32
ReleaseDC
GetDC
SetFocus
SetWindowTextW
SetForegroundWindow
SendDlgItemMessageW
GetDlgItemTextW
ScreenToClient
LoadStringW
SetDlgItemInt
FillRect
GetClientRect
GetSysColorBrush
DefWindowProcW
WinHelpW
LoadImageW
LoadCursorW
DispatchMessageW
DialogBoxParamW
MessageBoxW
CreateDialogParamW
GetDesktopWindow
MoveWindow
SetDlgItemTextW
ShowWindow
CharPrevW
CharNextW
IsDlgButtonChecked
GetWindowTextW
SendMessageW
GetDlgItem
EnableWindow
SetCursor
wsprintfW
IsWindow
BringWindowToTop
DestroyWindow
EndDialog
PeekMessageW
FindWindowW
UpdateWindow
GetWindowRect
GetSystemMetrics
SetWindowPos
GetParent
MsgWaitForMultipleObjects
GetWindowLongW
PostMessageW
SetWindowLongW
CheckDlgButton
RegisterWindowMessageW
gdi32
BitBlt
SelectObject
StretchBlt
GetStockObject
SetBkMode
DeleteDC
GetObjectW
CreateCompatibleDC
DeleteObject
GetDeviceCaps
CreateFontIndirectW
tapi32
tapiGetLocationInfoW
lineGetCountryW
lineInitialize
lineNegotiateAPIVersion
lineGetTranslateCapsW
lineShutdown
lineTranslateDialogW
advapi32
IsTextUnicode
RegOpenKeyW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
comctl32
CreatePropertySheetPageW
DestroyPropertySheetPage
PropertySheetW
shell32
ShellExecuteW
comdlg32
GetOpenFileNameW
mpr
WNetGetUserW
ole32
CoInitialize
CoCreateInstance
CoUninitialize
StringFromCLSID
CoTaskMemFree
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 19KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 183KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ