S:\wgLt\pgbw\ajyVBrj.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e5cc38e0d031583b0cbca3b9132f3f5c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e5cc38e0d031583b0cbca3b9132f3f5c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e5cc38e0d031583b0cbca3b9132f3f5c_JaffaCakes118
-
Size
48KB
-
MD5
e5cc38e0d031583b0cbca3b9132f3f5c
-
SHA1
1441d47c616750d4d74446d9e7e3ff7b3bdb4ec2
-
SHA256
3c599fc3da99a5cb283c09f5d2aeed8f9c9a39ee5301131867a337595cb5b031
-
SHA512
546e99385166749e821d4fc4647940e3703f3fafcce77fc246c21e21ee8842b1378bb5316b77f4522334965943f543f75ba4789769c9352f158a3ed9648c188c
-
SSDEEP
768:vMBFY7fZTy2jEOdI6FBBBpH4RwHRiKvZpypFu0vu8IqLZcHyyUM:UBOdToi5B3H4RkiEQFuC1iHW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5cc38e0d031583b0cbca3b9132f3f5c_JaffaCakes118
Files
-
e5cc38e0d031583b0cbca3b9132f3f5c_JaffaCakes118.dll windows:5 windows x86 arch:x86
bda94329a519cacb0895745b22813025
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
GetDlgItemInt
wsprintfA
DrawStateW
IsWindow
GetForegroundWindow
GetAsyncKeyState
SendMessageTimeoutW
SendMessageTimeoutA
IsCharLowerA
BeginPaint
SetCursorPos
GetWindowTextLengthW
GetMenu
WaitMessage
gdi32
CombineRgn
SetLayout
GetTextFaceW
WidenPath
LineDDA
CreateFontW
EndDoc
OffsetRgn
kernel32
FindClose
GlobalFindAtomW
GetThreadContext
DisconnectNamedPipe
CreateFileMappingW
SetPriorityClass
IsBadReadPtr
UnmapViewOfFile
lstrlenA
Sleep
RegisterWaitForSingleObject
HeapWalk
HeapValidate
SetFilePointer
Exports
Exports
?WYpqNgiktap@@YGPAXPAFM@Z
?bbqcNsTPKXmolbsoxy@@YGXIPAI@Z
?uhhRrMVejtaiyaBurj@@YGXF@Z
?ripxmGudTwpRf@@YGKGG@Z
?zOdzUjpcBFYjoicq@@YGXKPAJ@Z
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ