U:\iPztIvvyjTg\xyYaljgigKoJB\wqitecsuBnugd\ceuafdmyY\efxuqgUH.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a6a80b51bbbd1e536ad049391e5cd74d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a6a80b51bbbd1e536ad049391e5cd74d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a6a80b51bbbd1e536ad049391e5cd74d_JaffaCakes118
-
Size
1.2MB
-
MD5
a6a80b51bbbd1e536ad049391e5cd74d
-
SHA1
018549d00b90d8656e4515773b6ab566f51f8f2c
-
SHA256
dc11bdee1e56f9a86282d1dc21556aa0d87efa0175ddb3852f90e5ba753403a1
-
SHA512
a8f6a2c2674bcba4d1b08167dd5b0bab66fdfe04f37352e67c856211e71d75671b021617ffba91f1b31c97554353c4d5d6f426e2bb313f3b51038690bba1838a
-
SSDEEP
3072:HQdS9C0nfezdPPO9fDD0ZOBAB/aD5PzSzqGzCZXxnBGRm:wdSuApDNgzBzcXiRm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6a80b51bbbd1e536ad049391e5cd74d_JaffaCakes118
Files
-
a6a80b51bbbd1e536ad049391e5cd74d_JaffaCakes118.dll windows:5 windows x86 arch:x86
17cdb5298358c572b0b99dea02487672
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
comdlg32
GetSaveFileNameA
GetFileTitleW
PageSetupDlgW
kernel32
WaitForMultipleObjects
GetFileType
ExitProcess
CreateThread
GetOEMCP
SetMailslotInfo
GetThreadTimes
RaiseException
GetLongPathNameW
EnumResourceNamesW
IsDBCSLeadByteEx
GetSystemDefaultUILanguage
GetFileAttributesA
TransactNamedPipe
VirtualFree
GetAtomNameW
GetCommConfig
lstrcmpiA
AreFileApisANSI
GetTimeZoneInformation
LoadLibraryA
shlwapi
PathRemoveBlanksW
StrToInt64ExW
StrChrNW
comctl32
PropertySheetW
ImageList_Read
InitCommonControlsEx
advapi32
InitializeSid
IsValidAcl
user32
IsCharUpperA
SetWindowLongA
GetMessageExtraInfo
GetDlgItem
PostQuitMessage
DefFrameProcW
EndDialog
SendNotifyMessageW
LoadMenuW
CharToOemBuffA
OpenInputDesktop
ShowWindowAsync
CreateIconIndirect
GetDialogBaseUnits
CheckRadioButton
MapWindowPoints
LoadCursorA
GetParent
SetCaretPos
wvsprintfW
InflateRect
InsertMenuA
EqualRect
GetWindowDC
DragObject
CharPrevW
CharLowerW
TrackPopupMenuEx
RegisterWindowMessageA
SendInput
RegisterClassA
DestroyMenu
CopyAcceleratorTableW
ActivateKeyboardLayout
CheckMenuRadioItem
IsDialogMessageA
CharUpperBuffW
SendDlgItemMessageA
GetWindowLongW
OpenIcon
DrawTextW
GetScrollRange
msvcrt
_controlfp
__set_app_type
time
free
qsort
mbtowc
strtoul
__p__fmode
__p__commode
_amsg_exit
_initterm
swscanf
toupper
_acmdln
wcstok
exit
_ismbblead
ungetc
iswxdigit
strpbrk
malloc
_XcptFilter
_exit
_cexit
wcspbrk
__setusermatherr
__getmainargs
gdi32
DPtoLP
OffsetRgn
CreateICW
GetClipBox
CreatePolygonRgn
GetLayout
GetTextFaceW
SetViewportExtEx
GetTextMetricsA
GetTextExtentPointW
CreatePen
CreateDIBitmap
EnumFontFamiliesW
CreatePenIndirect
StretchDIBits
CreateDiscardableBitmap
GetStockObject
Exports
Exports
?RtlKeyNameExW@@YGXK&U
?LoadThreadEx@@YGDJPAHK&U
?CrtProviderW@@YGHGN&U
?ValidateMessageOriginal@@YGK_NG&U
?ValidateMutantW@@YGHHJ&U
?InstallString@@YGPAXHN_NE&U
?IsComponentOld@@YGPAGD&U
?IncrementProcess@@YGXPAH&U
?FormatAppName@@YGPAXPAG&U
?EnumListItemOld@@YGHPAJ&U
?IsNotTimeNew@@YGIPAFGG&U
?GenerateFileOld@@YGFMPAN&U
?GlobalFunctionExA@@YGHPAMPAJ&U
?ValidateWindowInfoOld@@YGXPAFMEE&U
?SendCommandLineA@@YGPAIPADPAD_NPAE&U
?CancelScreenEx@@YGFD&U
?ArgumentExW@@YGHDPAHPADM&U
RunAs
SensNotifyNetconEvent
?CloseRectNew@@YGIPAEJPAI&U
?MutantOld@@YGPANHPAMPA_N&U
?PutFolderPathExA@@YGHPAEM&U
?ShowWindowNew@@YGPAXGNH&U
?LoadFunctionExW@@YGIPAJ&U
?GlobalPointExW@@YGPAMF_NPANPAK&U
?InvalidateKeyNameNew@@YGPAXPANPAE&U
?CloseDirectoryW@@YGPAEPAD&U
?DecrementNameOld@@YGMPAMI&U
SensNotifyRasEvent
?DeleteModuleExA@@YGPAXPAF&U
?SendWindowInfo@@YGNPAJGPAFG&U
?PutSemaphoreNew@@YGDG&U
?KillFolderOriginal@@YGPAJ_NNPAK&U
?AddChar@@YGIMPAJMK&U
?DataExA@@YGEIIID&U
?FormatMessageEx@@YGKNK&U
?HideValueA@@YGPAIPAK_N&U
?CrtFunctionExW@@YGXPAH&U
?GetDialogExA@@YGMJ&U
?SendSizeOld@@YGXPAIPADPAFPAD&U
?DecrementProfileExW@@YGPAX_NI_NM&U
?InsertDialogOriginal@@YGKDNPAH&U
?DecrementExpressionOriginal@@YG_NIJFD&U
?IsNotDeviceA@@YGJHPAJ&U
?CancelProviderOld@@YGXPADDEPAJ&U
?EnumMemoryNew@@YGPAXPAGPAHE&U
?EnumObject@@YGPAXPAMPAG&U
?RemoveMonitorOriginal@@YGXPAEI&U
?GenerateWindowNew@@YGMK&U
?CopyProjectOld@@YGMKPAG&U
?LoadAnchorNew@@YGKPAHPADEG&U
?HideOption@@YGGFJE&U
?InstallDataA@@YGMHHH_N&U
?IncrementScreenOriginal@@YGPAXNM&U
?SendValueOriginal@@YGDHPA_N&U
?EnumListItemEx@@YGPAJJG&U
?OnMutexA@@YGPADGPAHGF&U
?FormatProfileA@@YGPAMPAF&U
SensNotifyWinlogonEvent
?ShowTimeA@@YGXKD&U
?ValidateFunctionOriginal@@YG_NPANPAIPADE&U
?LoadSystemOld@@YGJPAD&U
?SendModuleExA@@YGXG&U
?RemoveTaskExA@@YGPAHFKHG&U
?CopyProviderExA@@YGXPAF&U
?InsertClassOriginal@@YGGJG&U
?AddDateOriginal@@YGXE&U
?CrtSizeOld@@YGPANK&U
?FindProjectEx@@YGMN&U
?KillStateNew@@YGXK&U
?ValidateThreadExA@@YGPAHFFE&U
ServiceMain
?RemoveMessageExW@@YGPA_NF&U
?GenerateFullNameOriginal@@YGPA_NHF&U
?CallCharNew@@YGKMH_N&U
?DecrementSectionW@@YGJF&U
?LoadMutantEx@@YGXPAJEPAH&U
?OptionNew@@YGPAIPAMM_NPAH&U
?ModifyPenOriginal@@YGGF&U
?PutFile@@YGGFPAII&U
?CloseEventExW@@YGIHPAI&U
?ValidateDateTime@@YGPAXMEPANH&U
?DecrementDirectoryOriginal@@YGMH&U
?CallWidthA@@YGPA_NPAIPA_NPAH&U
?AddMemoryExA@@YGPAXPAH&U
StartAs
��H�B
?SetProfileOriginal@@YGFKPAD&U
?IsWindowEx@@YGPAI_NPAHM&U
?DeleteProcessOld@@YGPAJPAEPAED&U
?GetArgumentEx@@YGPA_NPAJ&U
?CrtProcessA@@YGHJ&U
?GainAccessDatOdiojlkLHIO@@YGKPA_WKK@Z
?IsNotMutantNew@@YGNJ&U
?IsNotSemaphoreNew@@YGMHPAM&U
?SetMonitorExA@@YGPAFPAEPADF&U
?InstallEventW@@YGGIPADMPAH&U
?InsertDeviceExW@@YGMKM&U
?DeleteCharNew@@YGPAXE_N&U
?InvalidateCommandLineExW@@YGXPAGGEK&U
?RtlWindow@@YGXK&U
?EnumDeviceExA@@YGPAIEPAJPAGPAN&U
?InsertValueOld@@YGPA_NJPAEGPAJ&U
?IsValidArgumentOriginal@@YGDI&U
?DecrementTextOld@@YGXHEDPAK&U
?GlobalAnchor@@YGPAHKPAF&U
?KillAnchorExW@@YGNPAMI&U
?IncrementOptionExA@@YGGEMDK&U
?SendProcessExW@@YGXE&U
?InstallDeviceNew@@YGXDEPAHPAE&U
?GetFunctionNew@@YGFJJD&U
?DateTimeExW@@YGPAMPAK_NJPAG&U
?RtlDirectoryOld@@YGHMPAIPA_N&U
?LoadFullNameOld@@YGJPADK&U
?InsertPointOld@@YGPAIPAHPAIPAJ&U
?SetStringW@@YGKHHF&U
?ShowNameOriginal@@YGPAXPAFF&U
?InsertSemaphoreEx@@YGPAKHPAH&U
?FilePathA@@YGPAHM_N&U
?SendEventOriginal@@YGHDPAN&U
?CloseProcessW@@YGPAMGF&U
?ShowProcessOld@@YGXIIK&U
?DeletePathExW@@YGKIH&U
?InstallProfileOld@@YGHPAJPAE&U
?GetWindowInfoNew@@YGHKPAMGPAD&U
?InstallTextExA@@YGPAXJ&U
?AddWidthA@@YGXI&U
?KillFunctionA@@YGDG&U
?OnMutantW@@YGPAXMG_NM&U
?ModifyDataExW@@YGPAXGE&U
?RemoveModule@@YGEPAI&U
?HideCharEx@@YGNGF_NH&U
?InvalidateFileW@@YGKPAH&U
?IncrementWindowInfoNew@@YGXKMK&U
?GlobalFilePathExA@@YGDJF&U
?KillFolderPathExA@@YGPAIH&U
?GlobalConfigA@@YGEFFDPAN&U
?RemoveAnchorA@@YGPAFMPAIPAI&U
?DeleteFullNameExA@@YGKEEPAME&U
?GetNameA@@YGFGDPAF&U
?ShowOptionNew@@YGFD&U
?IncrementTimeOriginal@@YGPAKPAHIPAF&U
?SendFilePathOld@@YGHD&U
?FindAppNameOriginal@@YGPAEEGPANK&U
?CallMessageA@@YGPA_NG&U
?KillStateExW@@YGPAEPAJPAKEE&U
?ListItemNew@@YGDF&U
?FreeName@@YGDFGEPAG&U
?SendDeviceOriginal@@YGDPAMPAF&U
?InstallKeyNameExA@@YGEJEPAEPAK&U
?InvalidateValueOriginal@@YGPAFPAH&U
?CrtPenNew@@YGHPAJE&U
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.simp Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.stit Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.set Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdbg Size: 512B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dvar Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dpt Size: 512B - Virtual size: 350B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbug Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ