iccvid.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b17c97688b729b5dad3412069e8575c2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b17c97688b729b5dad3412069e8575c2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b17c97688b729b5dad3412069e8575c2_JaffaCakes118
-
Size
246KB
-
MD5
b17c97688b729b5dad3412069e8575c2
-
SHA1
62675b7d76c828fe1a5266d0bf5eaa025e529174
-
SHA256
8b2677ff9d15e5a0bdfea668fc94c01b860feddb6af1144fe95c1c12d00553c0
-
SHA512
23f4d93051e490a30e1b218bb0ea97ab34d3c632c6c69b5efc93f5f8f4f07497d12fed87835ad697bea4d4ec0f3db12927c6009277e675d347b43e30043aeb29
-
SSDEEP
6144:KiyXmWIeFfKV8VBmeQhKfagY9a9IbP71M:5yXmWIQfHVmKfahEUPO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b17c97688b729b5dad3412069e8575c2_JaffaCakes118
Files
-
b17c97688b729b5dad3412069e8575c2_JaffaCakes118.dll windows:5 windows x86 arch:x86
457d216f4ab8abe4b92f831380df9a89
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntdll
RtlUnwind
user32
DialogBoxParamA
GetDC
ReleaseDC
EndDialog
SetWindowTextA
SendDlgItemMessageA
LoadStringA
LoadBitmapA
wsprintfA
EndPaint
GetWindowRect
GetDlgItem
BeginPaint
ScreenToClient
kernel32
VirtualQuery
InterlockedExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
LocalFree
MulDiv
GetPrivateProfileIntA
LocalAlloc
DebugBreak
lstrcatA
lstrcpyA
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
winmm
DefDriverProc
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
gdi32
GetSystemPaletteEntries
DeleteObject
GetObjectA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
Exports
Exports
DllInstanceInit
DriverProc
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ