K:\vripgp\nlvyfbuv\ikrmII\xvhxsT\mGnJY.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fcf1a9b5cdceb9b2f6bf310a9a44a1b9_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fcf1a9b5cdceb9b2f6bf310a9a44a1b9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fcf1a9b5cdceb9b2f6bf310a9a44a1b9_JaffaCakes118
-
Size
104KB
-
MD5
fcf1a9b5cdceb9b2f6bf310a9a44a1b9
-
SHA1
f79a248abfeca9ba60976d567621c9ac0b4d5276
-
SHA256
755fa28638cc27e8f3c19c598cbbe227b620dd1efe60cb26a8469c2b234c6fad
-
SHA512
27b9edabb2288b7a2bce721fd47236c729982fa0c7fce96c88ca3f6ece7fee7c48bb4165cc72de5f67ed8e8dedcb317e158f1efadb9295f0c5eaec9547f62750
-
SSDEEP
1536:C9SV5hsXQmPgX5SoQ7/SklviDJwRd0OfyN+5PDspFSkEGfeNjpDZgXuTdH:C9s9XYHviDCkNWDssGfujpWXK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcf1a9b5cdceb9b2f6bf310a9a44a1b9_JaffaCakes118
Files
-
fcf1a9b5cdceb9b2f6bf310a9a44a1b9_JaffaCakes118.dll windows:5 windows x86 arch:x86
aca7f376760a05c16184c0a99e3a1b12
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
comdlg32
ReplaceTextW
ChooseFontW
GetSaveFileNameA
kernel32
CloseHandle
LoadLibraryExA
CreateEventW
RemoveDirectoryW
GetProcAddress
GetTempFileNameW
GetThreadLocale
GetModuleHandleW
GetTickCount
GlobalGetAtomNameW
GetModuleHandleA
GetCurrentDirectoryA
SetThreadLocale
VirtualProtect
gdi32
ExtFloodFill
GetPaletteEntries
SetWindowExtEx
RoundRect
SetBkMode
EnumFontsW
GetViewportOrgEx
CreatePen
CreateHalftonePalette
user32
GetWindow
OffsetRect
SetCursor
MenuItemFromPoint
GetMenu
BringWindowToTop
SetWindowPos
CreateDialogParamA
SetDlgItemInt
GetClassLongA
LoadCursorW
DestroyMenu
CharUpperA
ClipCursor
Exports
Exports
?bGEYSpQ@@YGPAXH@Z
?QzzmshFOMDpXgjbCJu@@YGJE@Z
?lKhjpfdMulbsyU@@YGPAN_N@Z
?xilxrDwhdldTqvrlUh@@YGPAIIPAD@Z
?mfioqFwHZltKR@@YGDKPAD@Z
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ