Q:\TksgbK\ttpiUu\dtLVW\oeDdwaoF.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ab4c50b83bcddf40d47aa23342fc8584_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ab4c50b83bcddf40d47aa23342fc8584_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ab4c50b83bcddf40d47aa23342fc8584_JaffaCakes118
-
Size
113KB
-
MD5
ab4c50b83bcddf40d47aa23342fc8584
-
SHA1
ae6eb5527f244e14261999e3c6237e1f9e1d09a1
-
SHA256
03e707741f69f3a4941286844134c56fd860d3cc349305106a53e45727c9122e
-
SHA512
919b95f552ec54054ff34816d53696dc80f0836bdbaf344e5c25c4b876acc7bf78b0a95c75d42b6a5e1015109912f29644f786c62674ee4c5df8fe8f4c255c20
-
SSDEEP
3072:2GHGQrVY06HmSIjsl62nzJe+gmJCghS36t+lr5:/pcb42le+nJCghM6t0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab4c50b83bcddf40d47aa23342fc8584_JaffaCakes118
Files
-
ab4c50b83bcddf40d47aa23342fc8584_JaffaCakes118.dll windows:5 windows x86 arch:x86
2577d4fd7bae9ef50265f652bf73577f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
lstrlenW
GetProcAddress
LoadLibraryW
ReleaseMutex
GetVersionExA
lstrcmpiW
LeaveCriticalSection
ConvertDefaultLocale
GetComputerNameA
LoadLibraryExA
GetVersionExW
ClearCommError
SetEndOfFile
gdi32
MoveToEx
SetDIBColorTable
CreateRectRgnIndirect
RoundRect
TextOutW
Polyline
user32
MessageBoxA
IsCharUpperA
DestroyAcceleratorTable
GetWindowLongW
ShowScrollBar
SetForegroundWindow
ScrollWindow
GetPropW
ToUnicodeEx
SetDlgItemTextW
SetMenu
CreateCaret
shlwapi
StrCmpNW
Exports
Exports
?WsrXxkHSvIHjcwgAchMMe@@YGFPAM@Z
?ttyrvnep@@YGIM@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ