T:\hapcZdir\ivhjZe\Hitou\Reuvxs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fb61c47510928c457d61139eda447af9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb61c47510928c457d61139eda447af9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fb61c47510928c457d61139eda447af9_JaffaCakes118
-
Size
115KB
-
MD5
fb61c47510928c457d61139eda447af9
-
SHA1
a7c4beae2b101ea2c941c558688c6e1bbb16d77b
-
SHA256
4bf5657e40941ca4aac954fe7b9b22359c984b29e48fdceb81da08d6568a33bf
-
SHA512
804749c7a733062bdf74038c3d668a56e297e6017e6d7115db23a8ebc5bd6fa7c024c21577f11a8af160cc8ebd68a23cec9e00dc23de8f117eab7eb174f72f61
-
SSDEEP
3072:hZ2mvAUf8Erv0JgnJq6tBgs35Wy70FVxAWOm:imBfXrv0GJqKP3P8Vxm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb61c47510928c457d61139eda447af9_JaffaCakes118
Files
-
fb61c47510928c457d61139eda447af9_JaffaCakes118.dll windows:5 windows x86 arch:x86
15bc586b2fdd9c33db7898c959307253
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
shlwapi
StrCmpNW
user32
ExitWindowsEx
CreateWindowExA
GetPropW
GetDC
PostMessageW
GetClassWord
IsCharAlphaW
CreatePopupMenu
RegisterClassExA
CharPrevW
SetCaretPos
ShowScrollBar
SetPropW
DrawIconEx
gdi32
GetDeviceCaps
SetRectRgn
CreateBrushIndirect
RealizePalette
SetDIBitsToDevice
GetTextExtentExPointW
BeginPath
CreateBitmapIndirect
comctl32
DestroyPropertySheetPage
ImageList_GetImageCount
comdlg32
GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameA
kernel32
LocalAlloc
GetExitCodeThread
EnumResourceTypesA
lstrcmpiA
LCMapStringW
SetLastError
DeviceIoControl
AddAtomA
SearchPathW
GetSystemWindowsDirectoryA
SetThreadLocale
lstrlenW
Exports
Exports
?rdkfigftbfEeo@@YGEPAD@Z
?zfBSFiIgsxtqL@@YGGJPAN@Z
?vllFZxqFObpeuDKzu@@YGPAEDPAI@Z
?dBpwknK@@YGIG@Z
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 197B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ