C:\BUILD_~1\jdk6_30\control\build\WINDOW~1\tmp\sun\java.util.zip\zip\obj\zip.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8e9abd22e73bc8c996113cb081cdc1bf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e9abd22e73bc8c996113cb081cdc1bf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8e9abd22e73bc8c996113cb081cdc1bf_JaffaCakes118
-
Size
101KB
-
MD5
8e9abd22e73bc8c996113cb081cdc1bf
-
SHA1
d9dcf2be9a3257775ba4f8dd11c6fc828a28cbef
-
SHA256
1b14ed54aa9d7e1886a36de7490ba08cd9a6eb5121a5bb5bbec5ce9fc0941c14
-
SHA512
9fc77d94c73aafff55731a908e2e836582911d1e8813ef85cabcf0d7641055cbb852e0bbe164a8e0e8f40725bb297f2e2b3640c20acd4ba0568de322279312bb
-
SSDEEP
1536:0w/fCg3FX1iYgortW9XKnivNH8vSLRHh21pS2+kxTbER9O351V:VXdRsYg2tsXk8tSS1h2DtxC9S51V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e9abd22e73bc8c996113cb081cdc1bf_JaffaCakes118
Files
-
8e9abd22e73bc8c996113cb081cdc1bf_JaffaCakes118.dll windows:4 windows x86 arch:x86
ec98bc93764d44237092001297ada21c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
java
handleRead
_JNU_ThrowIllegalArgumentException@8
_JNU_ThrowInternalError@8
_JNU_ThrowByName@12
JNU_NewObjectByName
_JNU_NewStringPlatform@8
_JNU_ReleaseStringPlatformChars@12
jio_fprintf
handleLseek
_JNU_ThrowOutOfMemoryError@8
_JNU_ThrowIOExceptionWithLastError@8
_JNU_GetStringPlatformChars@12
winFileHandleOpen
jvm
_JVM_RawMonitorExit@4
_JVM_RawMonitorEnter@4
_JVM_NativePath@4
_JVM_RawMonitorDestroy@4
_JVM_GetLastErrorString@8
_JVM_RawMonitorCreate@0
msvcr71
_assert
_onexit
__dllonexit
_except_handler3
__CppXcptFilter
_adjust_fdiv
_initterm
strerror
_iob
strlen
strcpy
strcmp
realloc
memset
memcpy
sprintf
free
calloc
_strdup
_errno
malloc
kernel32
DisableThreadLibraryCalls
CloseHandle
CreateFileA
Exports
Exports
ZIP_CRC32
ZIP_Close
ZIP_FindEntry
ZIP_GetNextEntry
ZIP_Open
ZIP_ReadEntry
_Java_java_util_jar_JarFile_getMetaInfEntryNames@8
_Java_java_util_zip_Adler32_update@16
_Java_java_util_zip_Adler32_updateBytes@24
_Java_java_util_zip_CRC32_update@16
_Java_java_util_zip_CRC32_updateBytes@24
_Java_java_util_zip_Deflater_deflateBytes@28
_Java_java_util_zip_Deflater_end@16
_Java_java_util_zip_Deflater_getAdler@16
_Java_java_util_zip_Deflater_getBytesRead@16
_Java_java_util_zip_Deflater_getBytesWritten@16
_Java_java_util_zip_Deflater_init@20
_Java_java_util_zip_Deflater_initIDs@8
_Java_java_util_zip_Deflater_reset@16
_Java_java_util_zip_Deflater_setDictionary@28
_Java_java_util_zip_Inflater_end@16
_Java_java_util_zip_Inflater_getAdler@16
_Java_java_util_zip_Inflater_getBytesRead@16
_Java_java_util_zip_Inflater_getBytesWritten@16
_Java_java_util_zip_Inflater_inflateBytes@28
_Java_java_util_zip_Inflater_init@12
_Java_java_util_zip_Inflater_initIDs@8
_Java_java_util_zip_Inflater_reset@16
_Java_java_util_zip_Inflater_setDictionary@28
_Java_java_util_zip_ZipEntry_initFields@16
_Java_java_util_zip_ZipEntry_initIDs@8
_Java_java_util_zip_ZipFile_close@16
_Java_java_util_zip_ZipFile_freeEntry@24
_Java_java_util_zip_ZipFile_getCSize@16
_Java_java_util_zip_ZipFile_getEntry@24
_Java_java_util_zip_ZipFile_getMethod@16
_Java_java_util_zip_ZipFile_getNextEntry@20
_Java_java_util_zip_ZipFile_getSize@16
_Java_java_util_zip_ZipFile_getTotal@16
_Java_java_util_zip_ZipFile_getZipMessage@16
_Java_java_util_zip_ZipFile_initIDs@8
_Java_java_util_zip_ZipFile_open@28
_Java_java_util_zip_ZipFile_read@44
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ