DXSETUP.pdb
Static task
static1
Behavioral task
behavioral1
Sample
af32de0e9fdc6e7e67f1b0abad9b2a1b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af32de0e9fdc6e7e67f1b0abad9b2a1b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af32de0e9fdc6e7e67f1b0abad9b2a1b_JaffaCakes118
-
Size
595KB
-
MD5
af32de0e9fdc6e7e67f1b0abad9b2a1b
-
SHA1
8f5b1ef8df01c652f7ceba32f27b7f8630045f0d
-
SHA256
ca37334520c544c6c369fb2dd07c1e49181b40af93f1e83f134e02e7f287a9d2
-
SHA512
92b93152a7e745fea39663cd6c8586905677c6b9b313f632603058c425d7432f73ca81a4eccf9f2d8d7d98af35871c71bfe565d694fcfd19edb16a43721973db
-
SSDEEP
3072:li6LKer3aZKp++BMJ0prAafAkKdSQ5DbSN2LhaM96rKmMH2/5Mjt4zT1mFDYkCI/:fK4MJ0+Xh2wUM1Ws4VF2uNOIl7VOK4gA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af32de0e9fdc6e7e67f1b0abad9b2a1b_JaffaCakes118
Files
-
af32de0e9fdc6e7e67f1b0abad9b2a1b_JaffaCakes118.exe windows:6 windows x86 arch:x86
086b24940fbe0426f31ad417243ea7a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
kernel32
FindFirstFileA
lstrlenA
ReadFile
GetFileSize
CreateFileA
GetCurrentDirectoryA
FindClose
GetModuleFileNameA
SetErrorMode
CreateMutexA
GetModuleHandleA
CreateThread
GetSystemDirectoryA
GetCurrentProcess
CloseHandle
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
CompareStringA
lstrcmpiA
FormatMessageA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
Sleep
GetModuleHandleW
InitializeCriticalSection
LCMapStringW
LocalFree
GetLastError
GetWindowsDirectoryA
OutputDebugStringA
GetCommandLineA
GetStartupInfoA
GetLocalTime
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
MultiByteToWideChar
gdi32
StretchBlt
DeleteDC
CreateCompatibleDC
SelectObject
CreateFontIndirectA
DeleteObject
GetDeviceCaps
GetObjectA
user32
ReleaseDC
GetDC
LoadImageA
SystemParametersInfoA
SendDlgItemMessageA
SetWindowTextA
GetWindowLongA
SetWindowLongA
PostMessageA
GetParent
SetDlgItemTextA
GetDlgItem
SendMessageA
ShowWindow
GetAsyncKeyState
ExitWindowsEx
EnumWindows
CharLowerA
LoadStringA
MessageBoxA
GetWindowTextA
GetClassNameA
SetForegroundWindow
SetFocus
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
comctl32
CreatePropertySheetPageA
PropertySheetA
ord17
Sections
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE