R:\arwffn\ujjq\MOwZAQWG\cQcu\tEknlb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fda7a669bfb530c58514c4f00122cb5e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fda7a669bfb530c58514c4f00122cb5e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fda7a669bfb530c58514c4f00122cb5e_JaffaCakes118
-
Size
51KB
-
MD5
fda7a669bfb530c58514c4f00122cb5e
-
SHA1
0a76664bf46c69fca1111e2482f77e10cc30bd5e
-
SHA256
29eed5ab33a335fb9056ab75105a89211b0a58d0dabe7fe2c7bae45fe1382688
-
SHA512
5cdc7e9b8e0d507faf0cec2fab330e082546bd701f98c123fb638e4ac2632c7035f48939ae670fd1a7d9b991b99faf3bd3daff13c9951c8048f4a12bb6d9ee15
-
SSDEEP
1536:QDulwREpCXMyXH4REFLrT40Uplue2+WBw:QKqZLH4REnc0Upluc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fda7a669bfb530c58514c4f00122cb5e_JaffaCakes118
Files
-
fda7a669bfb530c58514c4f00122cb5e_JaffaCakes118.dll windows:5 windows x86 arch:x86
b407bfa3981474275ab4509853ced056
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
CascadeWindows
ScrollWindow
GetClassLongW
InsertMenuW
GetCaretPos
GetSubMenu
TrackPopupMenuEx
wsprintfA
GetMenuItemCount
GetScrollInfo
RegisterWindowMessageW
CreateMenu
kernel32
lstrlenA
HeapLock
GetThreadContext
CreateRemoteThread
FindNextFileA
GetFullPathNameW
GetSystemTimeAsFileTime
SetCommMask
CreatePipe
CopyFileA
LocalFileTimeToFileTime
AddAtomW
lstrcmpA
gdi32
StretchBlt
GetTextCharsetInfo
SetBkColor
ScaleViewportExtEx
SetBitmapBits
CreateDiscardableBitmap
GetPixel
SetBkMode
Exports
Exports
?drOikOs@@YGXG@Z
?tlmCbcewaQiGJD@@YGMJG@Z
?joUBvmGxvunyyqa@@YGFPAG@Z
?OhwdmcezPaqbE@@YGJG@Z
?thpUkIukc@@YGFPAD@Z
?zomzMkmcp@@YGXPAF@Z
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ