FXSEXT32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a6d558e8bdcda24b5e2cad73a1a3dff5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6d558e8bdcda24b5e2cad73a1a3dff5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a6d558e8bdcda24b5e2cad73a1a3dff5_JaffaCakes118
-
Size
78KB
-
MD5
a6d558e8bdcda24b5e2cad73a1a3dff5
-
SHA1
9100984a5279b2d8479693390ba43f77e2e73535
-
SHA256
03e6306bccfbbffbfa42dec31ec6f6ae2a8b93c439d07896e268c0828468e78e
-
SHA512
b779be1318337b669cd377f78b7132ae610607f01b7449385fe3477af41ad2fc1712a529ab0ef322a1a7056363ac818e118b17aaf72588c184f3cbd843757fc6
-
SSDEEP
1536:TzneT4deL5N74C+Jsj84BBV2engcK6J0fuKq8lZS:/YBLRCWBjKYKDc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6d558e8bdcda24b5e2cad73a1a3dff5_JaffaCakes118
Files
-
a6d558e8bdcda24b5e2cad73a1a3dff5_JaffaCakes118.dll windows:5 windows x86 arch:x86
ba032aec5908b4ea8d6593eb68dfc627
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
iswalpha
_vsnwprintf
_snwprintf
_except_handler3
_wsplitpath
free
_initterm
_wcsicmp
_stricmp
wcscmp
_wcsnset
wcslen
wcscpy
wcsrchr
wcscat
wcsncmp
??2@YAPAXI@Z
_adjust_fdiv
??3@YAXPAX@Z
wcsncpy
wcschr
malloc
fxsapi
FaxGetPersonalCoverPagesOption
FaxConnectFaxServerW
FaxGetReceiptsOptions
FaxClose
kernel32
MoveFileExW
GetFileType
CreateFileW
Sleep
HeapFree
FindClose
GetLastError
FindNextFileW
FindFirstFileW
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
ExpandEnvironmentStringsW
GetVersionExW
GetComputerNameW
lstrlenW
FreeLibrary
GetProcAddress
LoadLibraryW
CreateDirectoryW
GetFileAttributesW
CloseHandle
ReadFile
HeapCreate
GetProcessHeap
HeapAlloc
GetModuleFileNameW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
user32
DialogBoxParamW
SendMessageW
EnableWindow
GetDlgItem
MessageBoxW
WinHelpW
MessageBeep
AppendMenuW
IsDlgButtonChecked
EnableMenuItem
EndDialog
CheckDlgButton
GetWindowContextHelpId
LoadStringW
mapi32
ord140
ord75
ord139
ord17
ord13
ord15
winspool.drv
EnumPrintersW
OpenPrinterW
GetPrinterW
ClosePrinter
Exports
Exports
ExchEntryPoint
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ