iccvid.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b2f5a83bb12e88ffead7d751592797f8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2f5a83bb12e88ffead7d751592797f8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b2f5a83bb12e88ffead7d751592797f8_JaffaCakes118
-
Size
246KB
-
MD5
b2f5a83bb12e88ffead7d751592797f8
-
SHA1
9663eb9c3117e60a00addfc53cb1efd9744f278e
-
SHA256
919d800e191a9c6780aa0427683bbdf397c3bcf118b18cb01bc51918d1d039f8
-
SHA512
a1469fcee4aeca0a50c598e880ed9f47ce29fac57c55ee300ed4205593157446e49278e896408cfdb6a942948c4abce7f6cbc727600d6bd89ae339affc46c9e9
-
SSDEEP
3072:Lz8sUqiM9Sq6DzjTyJFqGf38K7MQQGWXsZIW+N4PEIkqB1eNfYll7vt4dOEAy43P:ZiMurTeFf38O12oDnPdlpt4c8X3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2f5a83bb12e88ffead7d751592797f8_JaffaCakes118
Files
-
b2f5a83bb12e88ffead7d751592797f8_JaffaCakes118.dll windows:5 windows x86 arch:x86
457d216f4ab8abe4b92f831380df9a89
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntdll
RtlUnwind
user32
DialogBoxParamA
GetDC
ReleaseDC
EndDialog
SetWindowTextA
SendDlgItemMessageA
LoadStringA
LoadBitmapA
wsprintfA
EndPaint
GetWindowRect
GetDlgItem
BeginPaint
ScreenToClient
kernel32
VirtualQuery
InterlockedExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
LocalFree
MulDiv
GetPrivateProfileIntA
LocalAlloc
DebugBreak
lstrcatA
lstrcpyA
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
winmm
DefDriverProc
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
gdi32
GetSystemPaletteEntries
DeleteObject
GetObjectA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
Exports
Exports
DllInstanceInit
DriverProc
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ