P:\oIQnqAds\qMpWZZlCaEoMc\RrbwvyFa\cbuawVach\yFhzfGnknzDJs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e1f7ca48c048cc73e431994d8dbeba79_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1f7ca48c048cc73e431994d8dbeba79_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e1f7ca48c048cc73e431994d8dbeba79_JaffaCakes118
-
Size
171KB
-
MD5
e1f7ca48c048cc73e431994d8dbeba79
-
SHA1
a81acd8ac090f361a895008a3bcd25045f19ca99
-
SHA256
31ab02364e36dd724ee226bf9526d9317ccbfd04000c62a118ce4429f2599b2a
-
SHA512
b75ec8f5ac382354fdd624ec8365e23d1e30ce522002b8a1bd05abc442f282294d8a6a22cedc970fd58fe215c0329792f03b969851a3c7a94f4d1d085dfe9070
-
SSDEEP
3072:KSi7WztWG3ol+N9HCgdZgVyclBWIcd90hMZg2:xFf3ol+NylsIcdKhMZg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1f7ca48c048cc73e431994d8dbeba79_JaffaCakes118
Files
-
e1f7ca48c048cc73e431994d8dbeba79_JaffaCakes118.dll windows:5 windows x86 arch:x86
ca514bfb66cdd5260bd729cd7f7fecad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetLocaleInfoW
ResumeThread
GlobalFree
FreeResource
QueryDosDeviceW
GetComputerNameExW
MulDiv
shlwapi
PathUnmakeSystemFolderA
advapi32
RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA
user32
ShowCursor
SetCursorPos
GetTopWindow
IsWindow
GetClientRect
IsWindowUnicode
GetFocus
OffsetRect
MessageBeep
ntdll
RtlCompareMemory
Exports
Exports
?InsertFil
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fxc Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fx Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ