F:\hgDpKoDwnqqxN\AtwreEmC\piIqvXf\lkivgpflswtX.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fab8c947f7bb8efc5cf1452229373760_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fab8c947f7bb8efc5cf1452229373760_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fab8c947f7bb8efc5cf1452229373760_JaffaCakes118
-
Size
50KB
-
MD5
fab8c947f7bb8efc5cf1452229373760
-
SHA1
6d4b0ca26d9fff53d2081a18135fb819ab5e5f80
-
SHA256
5fad2fcc060adf9ddb9f202f681b5a9674ae1af9680bd9ab07ea24015545ffc8
-
SHA512
c188cfad7567f4bd4f1ece18852553d39757afae029cd728e59ca5de70cd488a839b1d35b95fd969de0674b3ababa6bb2fafcea03f92b9836e82e3a531fe9bc2
-
SSDEEP
768:pO7Y6Mp5aCy+uR7iteUw5R3PZWXUsGaQHKFAWU4vZwl2WSrAl54VKOH9+7/B:8PSdR0xR38XUZyowWropQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fab8c947f7bb8efc5cf1452229373760_JaffaCakes118
Files
-
fab8c947f7bb8efc5cf1452229373760_JaffaCakes118.dll windows:5 windows x86 arch:x86
318d6316cf960a89fc9de469085e11b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
FindWindowW
OffsetRect
IsWindowEnabled
SetFocus
GetClientRect
AdjustWindowRect
ntdll
RtlCompareMemory
kernel32
FileTimeToSystemTime
SetCommState
GlobalDeleteAtom
EnumResourceNamesA
FindResourceW
GetNumberFormatA
lstrcatW
GlobalReAlloc
GetLastError
GlobalGetAtomNameA
VirtualFree
GetTimeFormatA
TlsGetValue
Exports
Exports
?FileIsMove
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE