c:\workspace\090909_wdk7600.16385\cnxpcf\i386\CnXPCF32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ae93f3c0ae91228a73c8660f2a8d362f_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ae93f3c0ae91228a73c8660f2a8d362f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ae93f3c0ae91228a73c8660f2a8d362f_JaffaCakes118
-
Size
272KB
-
MD5
ae93f3c0ae91228a73c8660f2a8d362f
-
SHA1
d648758ebdf849acdd70b7e5f239651bab34f5df
-
SHA256
e558eecbf9ffabe78e1cdf4500fa6b30510cf1ca656862a249752ab5f2ac043d
-
SHA512
7c58ab905c5ee526f95a57b219ca1785680e7d629cc0f0023bfff2ba279537f27b8e7dc319785d54ccc89366561f323c3919fee1ee01c46edb93b8558c8bdbb3
-
SSDEEP
6144:LtAOEA5KrasHBW3LyRoRrfGDX90N7tHw/dZO:Ltvo9HY7ooRGDX90FtHS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae93f3c0ae91228a73c8660f2a8d362f_JaffaCakes118
Files
-
ae93f3c0ae91228a73c8660f2a8d362f_JaffaCakes118.dll windows:6 windows x86 arch:x86
61ba2701039da51bd5df87f3339e4346
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
LocalUnlock
LocalFree
LocalLock
LocalAlloc
GetCommandLineA
GetVersionExA
GetProcAddress
GetModuleHandleA
ExitProcess
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
GetCurrentThreadId
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
LoadLibraryExA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
VirtualProtect
GetSystemInfo
VirtualQuery
Exports
Exports
PZAlloc
PZCalculate
PZCorrection
PZCorrection1color
PZCorrection32
PZCorrectionPAL
PZFree
PZHistogram
PZHistogram32
PZHistogramPAL
PZMargeHisto
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 182KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ