C:\Users\User\Documents\Visual Studio 2008\Projects\SFnew\Release\SFnew.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ae7318feb4ad4d7cfc61d861cb8d2648_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ae7318feb4ad4d7cfc61d861cb8d2648_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ae7318feb4ad4d7cfc61d861cb8d2648_JaffaCakes118
-
Size
215KB
-
MD5
ae7318feb4ad4d7cfc61d861cb8d2648
-
SHA1
b93e80f8145370c917362dc536c02bfce743a126
-
SHA256
4fc4a8fe6b19f8dbcddefc906f948461173696ca6b3a5cc2376a9a81f2fd3e05
-
SHA512
f811b9ad1a8d0126c36a045af861a1a76d1c920fbba4f0d67d88ca4c217a692399d8c449e7363edc305cdaa7b0bc49d04dab3efddcf14a10fa5a70ff69cac5c9
-
SSDEEP
6144:VuuyUYh1QQE/+qLeI/8QeeaQeeVjQeesQeeoVQeehQeeMF4Ef6sVs/DTh:DyUYhGBtOeEip/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae7318feb4ad4d7cfc61d861cb8d2648_JaffaCakes118
Files
-
ae7318feb4ad4d7cfc61d861cb8d2648_JaffaCakes118.dll windows:5 windows x86 arch:x86
788ed8fc6dd87ed9b1a34e21c7f27e93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
DisableThreadLibraryCalls
Sleep
GetModuleHandleA
CreateThread
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
FlushInstructionCache
SetLastError
IsProcessorFeaturePresent
OutputDebugStringA
GetSystemInfo
MultiByteToWideChar
LoadLibraryA
GetProcAddress
WideCharToMultiByte
InterlockedCompareExchange
InterlockedExchange
GetVersionExA
VirtualProtect
user32
GetSystemMetrics
GetAsyncKeyState
msvcr90
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
memcpy
memset
__CxxFrameHandler
iswspace
iswalpha
iswdigit
iswpunct
_CIacos
_finite
free
strncpy
_ftol
vsprintf_s
clock
sprintf
malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_adjust_fdiv
__CxxFrameHandler3
gdi32
DeleteDC
GetTextMetricsA
GetObjectW
CreateDIBSection
GetGlyphOutlineA
ExtTextOutW
MoveToEx
ExtTextOutA
CreateCompatibleDC
SetMapMode
SetTextAlign
CreateFontIndirectW
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
SetBkMode
SetBkColor
SetTextColor
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
DeleteObject
GetObjectA
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ