desk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bfaa687dd027e3fd76693b0b12d40c9a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bfaa687dd027e3fd76693b0b12d40c9a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bfaa687dd027e3fd76693b0b12d40c9a_JaffaCakes118
-
Size
126KB
-
MD5
bfaa687dd027e3fd76693b0b12d40c9a
-
SHA1
cd46b6f0d62471b235d8189ea5c57038d160d8e6
-
SHA256
19f789e0eb991ee6a0b96b24342dd8f911030e346cc425958e71bd2e283a0ebc
-
SHA512
571d5b440f889a72928e1760b4eecb3ae87368b3f8afa5a0e667e7f1fb29ef293a4ea0405380309e070e528a67e8efaccd6356e6bbe67ebe761027d890310c42
-
SSDEEP
3072:kvxsAIQ8pUdLPqAyydCIFeIEdIWDekIFeIEdIWDeCL+Fgq:gs46UdLPpdtFhE++ePFhE++elV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfaa687dd027e3fd76693b0b12d40c9a_JaffaCakes118
Files
-
bfaa687dd027e3fd76693b0b12d40c9a_JaffaCakes118.dll windows:5 windows x86 arch:x86
652666542531412abc9ad900d8a43776
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
prfn0885.dat
ord1
msvcrt
_except_handler3
_vsnwprintf
malloc
_adjust_fdiv
_initterm
free
wcslen
_wcsnicmp
??3@YAXPAX@Z
_purecall
kernel32
MultiByteToWideChar
WritePrivateProfileStringW
CloseHandle
Sleep
CreateEventW
DisableThreadLibraryCalls
FileTimeToSystemTime
lstrcmpW
GetLastError
GetVersionExW
GlobalMemoryStatusEx
GetSystemInfo
GetProcAddress
FreeLibrary
InterlockedCompareExchange
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FindClose
InterlockedDecrement
LoadLibraryW
GetModuleFileNameW
lstrcpynW
GetModuleHandleW
DelayLoadFailureHook
SetEvent
InterlockedIncrement
GetCurrentDirectoryW
LocalLock
LocalUnlock
lstrlenW
LocalAlloc
GetPrivateProfileStringW
LocalReAlloc
LocalFree
GetWindowsDirectoryW
lstrcmpiW
FindFirstFileW
GetVersionExA
FindNextFileW
user32
GetDlgItem
EnableWindow
CharNextW
IsCharUpperW
CharLowerW
CharUpperBuffW
IsDlgButtonChecked
SendDlgItemMessageW
GetParent
SendMessageW
EnumDisplayDevicesW
EnumWindows
LoadIconW
CreateWindowExW
CheckRadioButton
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
GetClassInfoW
GetFocus
LoadStringW
CharUpperW
SetWindowLongW
PostMessageW
SystemParametersInfoW
MessageBoxW
GetWindowTextW
SetCursor
LoadCursorW
WinHelpW
UpdateWindow
SetForegroundWindow
GetSystemMetrics
DefWindowProcW
SetTimer
KillTimer
FillRect
GetWindowLongW
DestroyWindow
GetClassNameW
ReleaseDC
GetDC
RegisterClassW
gdi32
GetPixel
GetClipBox
DeleteObject
SelectObject
CreateBitmap
CreateCompatibleDC
GetStockObject
shlwapi
ord175
SHDeleteKeyW
ord174
StrStrIW
StrStrW
ord497
StrCmpW
ord219
StrCmpIW
ord499
StrToIntW
ord199
shell32
ord176
ord168
ord170
ord167
DragAcceptFiles
DragFinish
DragQueryFileW
ord100
Control_RunDLLW
ord92
ord730
ord169
advapi32
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
CloseServiceHandle
UnlockServiceDatabase
ChangeServiceConfigW
LockServiceDatabase
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
RegDeleteValueW
RegEnumKeyW
RegQueryInfoKeyW
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
ole32
CoCreateGuid
StringFromIID
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
Exports
Exports
CPlApplet
DeskSetCurrentScheme
DeskSetCurrentSchemeA
DeskSetCurrentSchemeW
DisplayClassInstaller
DisplayOcSetupProc
DisplaySaveSettings
InstallScreenSaver
InstallScreenSaverA
InstallScreenSaverW
MonitorClassInstaller
UpdateCharsetChanges
UpdateUIfontsDueToDPIchange
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.detour Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE