winshfhc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a830015d1d51e1e07da90dff5dea9a15_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a830015d1d51e1e07da90dff5dea9a15_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a830015d1d51e1e07da90dff5dea9a15_JaffaCakes118
-
Size
189KB
-
MD5
a830015d1d51e1e07da90dff5dea9a15
-
SHA1
2dfe294e7be11c230677a6542171786bc45d2eca
-
SHA256
36646be62410538642c595a5c90bf76787eedada384cb71fcccf89d85240c4d7
-
SHA512
bc221258c412aff08add3179dc99ba189e6c0db3cefa6a8d619ffef4b19c4cc24243c099176dd21a9269a8949baade78334e953fe19297708f04d395d45fb1ba
-
SSDEEP
3072:xTnIo+v2Q7COuliV7FzIFy+mMozfd7Brwi+IvOXp6pnfKAoRgk9cSS9+u:x3QvX5Fyysobd7d7+Iv7fIRgk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a830015d1d51e1e07da90dff5dea9a15_JaffaCakes118
Files
-
a830015d1d51e1e07da90dff5dea9a15_JaffaCakes118.dll windows:5 windows x86 arch:x86
d8816e4733e6840a3d60e564156d1cc7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
free
towupper
_except_handler3
malloc
kernel32
GetFileSizeEx
SetFilePointerEx
GetLastError
HeapDestroy
UnmapViewOfFile
HeapCreate
MapViewOfFile
CloseHandle
CreateFileMappingW
ReadFile
CreateFileW
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
SetFilePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileSize
GetCurrentProcess
ole32
CoCreateInstance
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
shlwapi
PathFindFileNameW
wmvcore
WMCreateEditor
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 718B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ