E:\lTaOjxdhmSYfzGeumFLzJs\pknxUrRJhqblsdxd\ytaaxOqmaZexgsGBa\lbkgymHgwuHtUumpmowaCf\dzrUCLrbgmvmdy\BghworelaJcuATvsnGn.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fc6978ff67300968256285239536d30a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc6978ff67300968256285239536d30a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fc6978ff67300968256285239536d30a_JaffaCakes118
-
Size
123KB
-
MD5
fc6978ff67300968256285239536d30a
-
SHA1
4bc3e37f5bee8570df118df63a648407c1513384
-
SHA256
06870fb9ad8c34447ad6e23c1db5ddfe0d744c96f640648738a8fb3502045fb9
-
SHA512
9281d011f6c3fcd9e21ce9e9e4d055c5e31284e5d1ecb4406d4e6f5a58911d818ff696ac4cc59af23afea2599aed3dd5019afc2302ccc9542f9ee9542f8a3327
-
SSDEEP
3072:FxdgdbQ4pTtxehMhKGgZV2vwxddaTEUvZXrOne3O3I32flCchs:HOd0h/mwxmAAZXKn2OYhc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc6978ff67300968256285239536d30a_JaffaCakes118
Files
-
fc6978ff67300968256285239536d30a_JaffaCakes118.dll windows:5 windows x86 arch:x86
31e9e597a4e70134a07af1079acfac4d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
shell32
ord196
ord195
kernel32
GetPriorityClass
CreateFileA
GetModuleHandleW
DeleteAtom
SetEvent
GetAtomNameW
GetProcAddress
LocalReAlloc
TryEnterCriticalSection
lstrcpyW
WaitForSingleObject
MapViewOfFile
SetHandleCount
FindResourceExW
lstrlenA
VirtualFree
GetComputerNameExA
shlwapi
StrChrIW
gdi32
SetBkMode
SetBrushOrgEx
CreateHatchBrush
SetWindowOrgEx
OffsetRgn
SetWindowExtEx
GetNearestColor
UnrealizeObject
GetDIBits
WidenPath
SetBitmapDimensionEx
SetViewportExtEx
GetObjectW
user32
FindWindowA
CreateMenu
CheckMenuItem
DrawStateA
GetKeyboardLayoutNameW
CopyAcceleratorTableW
EndDialog
SetRect
GetMenuItemID
SetCursor
GetDlgItemTextW
SetScrollRange
MonitorFromRect
OffsetRect
InvalidateRgn
MapVirtualKeyExW
ChildWindowFromPointEx
GetMessageTime
GetAsyncKeyState
CheckRadioButton
GetWindow
ShowWindowAsync
InvalidateRect
LoadAcceleratorsA
AppendMenuA
SetClassLongW
RemovePropW
MessageBoxA
SetUserObjectInformationW
RedrawWindow
comdlg32
GetOpenFileNameW
ChooseFontW
CommDlgExtendedError
Exports
Exports
AlphaBlend
?DufiluIOQF67uiofYIFYfUFyf@@YGKEPA_WG@Z
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ