C:\not\cryptor\xstubexe\Release\xstubexe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ad0f1ee3489711cebbbe7e3adf5e3700_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad0f1ee3489711cebbbe7e3adf5e3700_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ad0f1ee3489711cebbbe7e3adf5e3700_JaffaCakes118
-
Size
810KB
-
MD5
ad0f1ee3489711cebbbe7e3adf5e3700
-
SHA1
10c534add9723342d9ba7140ecc02d5de72ccf78
-
SHA256
3e97d6ffddf79d8f15e51c971c01fb29312e8098e2ee4ed9d1ca88ccb2fde1cc
-
SHA512
b6db45193e53fba5ffcd51844f1988e8df6eafee7301398fc0b8173eb75216efdb0d198baf48bbefeed7168a4cc8683bc4339ecf31ce37130f6f31a538519a19
-
SSDEEP
24576:16leXQiX2E7Nx4XaJJK7VCt09MlqnJ/6x:8lpE7N6EJICXqng
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad0f1ee3489711cebbbe7e3adf5e3700_JaffaCakes118
Files
-
ad0f1ee3489711cebbbe7e3adf5e3700_JaffaCakes118.dll windows:5 windows x86 arch:x86
87613aa7d171a8d9d9f33be207640fa8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
HeapCreate
GetProcessHeap
GetTickCount
HeapAlloc
CreateFileA
ExitProcess
shell32
SHGetDesktopFolder
SHBrowseForFolderA
ole32
CoInitialize
crypt32
CertCloseStore
CertCompareCertificate
iphlpapi
AddIPAddress
secur32
CompleteAuthToken
QuerySecurityPackageInfoA
Exports
Exports
antiemu32
Sections
.text Size: 800KB - Virtual size: 799KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bddx Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ