T:\yvTxxfE\ymwXyka\Xbmtwkcc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a238b6106bbf442f870d4091f07743d6_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a238b6106bbf442f870d4091f07743d6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a238b6106bbf442f870d4091f07743d6_JaffaCakes118
-
Size
113KB
-
MD5
a238b6106bbf442f870d4091f07743d6
-
SHA1
a3beeec70d4c39bb0f05a9b0ff2de6ea5f07f99b
-
SHA256
a7f5005315d059b71f3044fbb2505f8d53ed57870325d8b0137e5ba085b3d56c
-
SHA512
02cdcbb1d85cc63a9111c612236b1448621bec4b91894401ae5df5bc7bdb23b6f472d562cb96151b2bbadab64f542680b35ee656d2fa05fb545f29feb46f94d8
-
SSDEEP
1536:at+95IjpEaJ8PECKmJ3zrQonyMFtZnZO+cHGmLaq0cuzFXt+3FAgLV08:ac4tGPECRrQoyQZnXQ9HNGpI3LLV0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a238b6106bbf442f870d4091f07743d6_JaffaCakes118
Files
-
a238b6106bbf442f870d4091f07743d6_JaffaCakes118.dll windows:5 windows x86 arch:x86
385ed5e72eb4d05c719067e7d7aef0c6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
comctl32
PropertySheetW
CreateStatusWindowW
DestroyPropertySheetPage
ImageList_Write
kernel32
lstrcmpiW
TlsFree
MapViewOfFile
LeaveCriticalSection
LoadLibraryW
SystemTimeToFileTime
GetSystemTimeAsFileTime
lstrlenW
GetLocaleInfoW
LocalAlloc
GetProcAddress
GetTempFileNameW
lstrcatW
shlwapi
StrCmpNW
gdi32
PatBlt
OffsetRgn
GetBitmapBits
GetSystemPaletteEntries
CreateBitmap
GetTextExtentPoint32W
EnumFontFamiliesW
GetRgnBox
FillRgn
user32
EqualRect
GetWindowLongW
ChildWindowFromPointEx
IsCharUpperA
OpenDesktopW
GetDC
AppendMenuA
GetPropW
SetWindowRgn
SendMessageTimeoutW
InsertMenuItemW
GetDlgItemInt
ShowScrollBar
TileWindows
Exports
Exports
?kwzjcuadlwlJz@@YGGPA_NPAE@Z
?mkwpzff@@YGPAHPAD@Z
?hnBXcUevzKlNhicw@@YGJPAIPAF@Z
?nnbweKOyhxMowztva@@YGPAID@Z
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 207B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ