F:\hgDpKoDwnqqxN\AtwreEmC\piIqvXf\lkivgpflswtX.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f00126d9162d3567ef9ede94c956f626_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f00126d9162d3567ef9ede94c956f626_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f00126d9162d3567ef9ede94c956f626_JaffaCakes118
-
Size
50KB
-
MD5
f00126d9162d3567ef9ede94c956f626
-
SHA1
a9441afa511522943056ce694723c81a023d1728
-
SHA256
2cce08172c0646533733775f7323f1e5ae5e9a3766bd312dd0824ef8e2bf9709
-
SHA512
b2619c425bc0db82cc60cc51a272b83dfe60fe56d3768ae0fb26a526aeb8040fc5f6b1f15ffa813e10882baadba79a64bc082ecfabc07daad7ba7646ab15390f
-
SSDEEP
768:zO7Y6Mp5aCy+uR7iteUw5R3PZWXUsGaQHKFAWU4vZwl2WSrAl54VKOHp+7/B:yPSdR0xR38XUZyowWrops
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f00126d9162d3567ef9ede94c956f626_JaffaCakes118
Files
-
f00126d9162d3567ef9ede94c956f626_JaffaCakes118.dll windows:5 windows x86 arch:x86
318d6316cf960a89fc9de469085e11b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
FindWindowW
OffsetRect
IsWindowEnabled
SetFocus
GetClientRect
AdjustWindowRect
ntdll
RtlCompareMemory
kernel32
FileTimeToSystemTime
SetCommState
GlobalDeleteAtom
EnumResourceNamesA
FindResourceW
GetNumberFormatA
lstrcatW
GlobalReAlloc
GetLastError
GlobalGetAtomNameA
VirtualFree
GetTimeFormatA
TlsGetValue
Exports
Exports
?FileIsMove
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE