B:\gbyK\HyxzbLvtJuuv4\rfpXTlE\ouporae.gXb
Static task
static1
Behavioral task
behavioral1
Sample
a2486f6dcf148ea9a38f8888a5670806_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a2486f6dcf148ea9a38f8888a5670806_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a2486f6dcf148ea9a38f8888a5670806_JaffaCakes118
-
Size
85KB
-
MD5
a2486f6dcf148ea9a38f8888a5670806
-
SHA1
cb4271d29d7833dd66521a00eb4453637c466b67
-
SHA256
4c42e3ca9a583af9f476aa50806d476626b55a852cd93aad812fe1ce533b564e
-
SHA512
670c624f9228e7556e69b7cf1bca15524e7f0727f9d9b28d9de19d6df4d393651fc9648e162260584ce799239e331061a38adc189277d19e8a8c3465122a606b
-
SSDEEP
1536:PllAqf5K8NTxkJz3OsUaK4DyLXkYYz2xnhKG9ABAdtXSt+2IUiSoY0:LQ9JTNlKzL05CnFOmXoRiSo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2486f6dcf148ea9a38f8888a5670806_JaffaCakes118
Files
-
a2486f6dcf148ea9a38f8888a5670806_JaffaCakes118.dll windows:5 windows x86 arch:x86
f1310f7ed2f0c5c27b6e2860538c44d1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
shlwapi
PathParseIconLocationA
StrStrW
PathCompactPathExW
kernel32
SetupComm
lstrlenA
GetCommState
LoadLibraryW
GlobalFix
SetMessageWaitingIndicator
CreateJobSet
lstrcpyA
GetSystemTimeAdjustment
LoadLibraryExW
OpenSemaphoreW
lstrcmpiW
CreateFileMappingA
MapViewOfFile
GetModuleHandleExW
GetTapePosition
user32
CharUpperA
GetClipCursor
CopyImage
GetSubMenu
DrawTextW
GetWindowRect
GetClientRect
GetForegroundWindow
GetMenu
SetLastErrorEx
GetAltTabInfoA
RedrawWindow
AdjustWindowRect
GetDialogBaseUnits
ModifyMenuA
GetClipboardOwner
DestroyCursor
MapWindowPoints
gdi32
GetEnhMetaFileHeader
SetMiterLimit
SetDCBrushColor
SetViewportOrgEx
GetFontData
CreateRectRgn
GetTextCharsetInfo
GetRgnBox
CreateFontIndirectW
DeleteEnhMetaFile
SetEnhMetaFileBits
Exports
Exports
?_DrawFocusRect@@YGKPAD0PAG@Z
?_FillRect@@YGKPAD0@Z
?_FrameRect@@YGPAXPAKPAEPAI@Z
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RData Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CData Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 706B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ