Q:\kbDKpEFlrrG\cvjzmyizghmf\oqgxajsq\sSDIgnyb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ab5c4a1be99a963398ee1b52851dd111_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ab5c4a1be99a963398ee1b52851dd111_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ab5c4a1be99a963398ee1b52851dd111_JaffaCakes118
-
Size
50KB
-
MD5
ab5c4a1be99a963398ee1b52851dd111
-
SHA1
3a50022bd07643728bfeed6a550e30743be0b2fa
-
SHA256
06eafe9d10ba4ae2322afee430fac257fe225d75922bef3873741f6bd532cf7f
-
SHA512
cc037ab3b4a5d6ed51a8a6aa4083eb7b21ceb3539f692cb81c51f63afe3f1594b05198dce38ee0e699d929a33a6315d4d1519d9a853a40cf9deb7c607208a389
-
SSDEEP
1536:/YXxJso4jj6oY3oCXYgURtQB4/oR5hU1+xwccZBGXE3sfLO:/YXxLg6bhD4A3hJRHE3YL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab5c4a1be99a963398ee1b52851dd111_JaffaCakes118
Files
-
ab5c4a1be99a963398ee1b52851dd111_JaffaCakes118.dll windows:5 windows x86 arch:x86
cda18ad1570bf5d951938afa6d1f4098
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntdll
RtlCompareMemory
user32
FindWindowA
PeekMessageW
GetWindowRect
CharNextW
SetFocus
wvsprintfA
IsWindowEnabled
ValidateRect
OffsetRect
AdjustWindowRect
GetAsyncKeyState
SetScrollPos
DrawFocusRect
WindowFromPoint
GetShellWindow
OpenIcon
CreateIconFromResource
kernel32
GetCommState
GetLastError
FindCloseChangeNotification
GetOverlappedResult
GetStartupInfoW
EnumResourceNamesA
Exports
Exports
?TemporaryArrayCre
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE