prtjw650.hu
Static task
static1
Behavioral task
behavioral1
Sample
e0d9e4b0295b389525a72d36f10a8995_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0d9e4b0295b389525a72d36f10a8995_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e0d9e4b0295b389525a72d36f10a8995_JaffaCakes118
-
Size
78KB
-
MD5
e0d9e4b0295b389525a72d36f10a8995
-
SHA1
ba85c0a8d1d871dfe1b1b26e2856dfd869f0aa9c
-
SHA256
4081030e988ccc2f56a5fba4a7f1b58424af07fdd8ee3f8130e7af0f6e19fd25
-
SHA512
3a44d7e6cbe3625c05c46c2ba2acd3ee5462f329b3d512b28dd3d6839bb79e6bd62aea5e71a87adde095b53ef8bc11d3da6e5e7773890dc178cd4a8ce85986fe
-
SSDEEP
1536:Y32tPAfMeJpavDH3s8se7xH/z+1Y/S1xwgvw49:YwPXOkDH81e7x/6QS1xe49
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0d9e4b0295b389525a72d36f10a8995_JaffaCakes118
Files
-
e0d9e4b0295b389525a72d36f10a8995_JaffaCakes118.dll windows:4 windows x86 arch:x86
02ffa37b4c34e430de7be5b4dd7bb3bb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
ReleaseMutex
GetACP
DisconnectNamedPipe
WriteFile
ConnectNamedPipe
GetModuleHandleA
IsBadCodePtr
GetSystemInfo
FreeEnvironmentStringsW
InterlockedExchangeAdd
InitializeCriticalSection
InterlockedDecrement
VirtualProtect
SetEvent
HeapAlloc
GetCPInfo
GetLocaleInfoA
GetCurrentProcessId
WaitForSingleObject
IsBadReadPtr
SetUnhandledExceptionFilter
GetStdHandle
InterlockedExchange
GetModuleFileNameA
GetCurrentThreadId
WideCharToMultiByte
DuplicateHandle
Sleep
LoadLibraryA
CreateEventA
CreateTimerQueueTimer
GetLastError
ResetEvent
CreateNamedPipeA
UnmapViewOfFile
LeaveCriticalSection
GetSystemTimeAsFileTime
DeleteCriticalSection
CreateMutexW
GetOEMCP
HeapDestroy
LCMapStringA
CreateThread
GetEnvironmentStrings
GetEnvironmentStringsW
DeleteTimerQueueTimer
OpenProcess
RtlUnwind
SetLastError
WaitForMultipleObjects
HeapFree
InterlockedCompareExchange
UnhandledExceptionFilter
QueryPerformanceCounter
GetStartupInfoA
MultiByteToWideChar
lstrcpyW
FreeEnvironmentStringsA
ExitThread
GetBinaryTypeA
GetFileType
GetTickCount
VirtualQuery
user32
DrawIcon
CreateIconFromResource
wsprintfW
LoadIconA
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
Exports
Exports
kustwmugq
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 614B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ