D:\sGrid\Release\sGridClientM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ba68aa1388564f6416bc1419ae7bbf5d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba68aa1388564f6416bc1419ae7bbf5d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ba68aa1388564f6416bc1419ae7bbf5d_JaffaCakes118
-
Size
163KB
-
MD5
ba68aa1388564f6416bc1419ae7bbf5d
-
SHA1
3a095082e6185cf83869990451f07b62f9eb6231
-
SHA256
9c8a1a68e9baca2b071b8db1e2e736265a6553e777c29a3b49abfc605fb4593e
-
SHA512
69ccfb17db3cf6c102778c724a46d7a96b0a16d0b1f841283f0e64035092e40d8f42ee9b74cfaae49906c969abfb84cdbe03ae5f6cc27321b6f70bf46ca6f78e
-
SSDEEP
3072:QPc9sqtfDnPT+yY3m892YagDY//WNUKK/5U:wc79D7+yim892YagDY/wNf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba68aa1388564f6416bc1419ae7bbf5d_JaffaCakes118
Files
-
ba68aa1388564f6416bc1419ae7bbf5d_JaffaCakes118.dll windows:5 windows x86 arch:x86
adf10282d8b86d46077eea2e16dc6ffe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
shlwapi
PathFindExtensionW
ws2_32
__WSAFDIsSet
htonl
WSACleanup
ntohl
gethostbyname
ioctlsocket
shutdown
ntohs
recvfrom
sendto
recv
send
WSAStartup
accept
listen
select
WSAGetLastError
connect
getpeername
getsockname
closesocket
bind
htons
setsockopt
socket
advapi32
StartServiceW
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ControlService
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeEx
oleaut32
SysFreeString
SysAllocString
kernel32
LoadLibraryA
GetTimeZoneInformation
HeapReAlloc
VirtualAlloc
FlushFileBuffers
WriteConsoleW
SetEndOfFile
WriteConsoleA
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetProcessHeap
CreateFileA
GetLocaleInfoW
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetConsoleOutputCP
PeekNamedPipe
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
SetFilePointer
GetStartupInfoA
GetStdHandle
Sleep
GetTickCount
CreateThread
ResumeThread
WaitForSingleObject
GetModuleFileNameW
GetLongPathNameW
CloseHandle
ExpandEnvironmentStringsW
WideCharToMultiByte
GetPrivateProfileStringA
GetPrivateProfileIntW
GetPrivateProfileStringW
DeleteFileW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetFilePointerEx
GetDriveTypeW
FindFirstFileW
FindNextFileW
FindClose
SetFileAttributesW
MultiByteToWideChar
WritePrivateProfileStringW
CreateFileW
ReadFile
GetLastError
GetFileAttributesW
InterlockedIncrement
InterlockedDecrement
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WriteFile
GetConsoleCP
GetConsoleMode
HeapFree
HeapAlloc
ExitProcess
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
LCMapStringW
GetFullPathNameW
GetCurrentDirectoryA
SetStdHandle
SetHandleCount
Exports
Exports
DLLStart
DLLStop
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ