fgh4wsadgsd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
01725a5cdba5b129ebaed3d06351c7e0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
01725a5cdba5b129ebaed3d06351c7e0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
01725a5cdba5b129ebaed3d06351c7e0_JaffaCakes118
-
Size
156KB
-
MD5
01725a5cdba5b129ebaed3d06351c7e0
-
SHA1
bf19392200240111b7f954e36bf2ccaca1aa2dd6
-
SHA256
fa41f3e4f44147d995bb2f1b2cc31981a6eff1c0e0b27048746d463c68671e35
-
SHA512
27c5852728fdd2b16b4ca226b8b3dc8b4d3e8bb2b10d44124f0e5f3712be7248f86794501cd4b74def45d89ca9ae18fdce97eef8195fefa8c056c9d083629f3a
-
SSDEEP
3072:SK+PJC6Jhy3GCkaKe2s+ErdvDEIARyl87S+T8kSZwjgrD/P65jtAE:mJ9JIWCRblpgI9lQS+wkSZwgn6YE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01725a5cdba5b129ebaed3d06351c7e0_JaffaCakes118
Files
-
01725a5cdba5b129ebaed3d06351c7e0_JaffaCakes118.dll windows:4 windows x86 arch:x86
ba31525771016e433b22bde0564515f7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InterlockedCompareExchange
SetConsoleTitleA
GetCPInfoExW
CreateMutexW
GetTimeZoneInformation
SetHandleCount
GetConsoleTitleW
GetProcessHeap
GetProfileStringW
CreateFiberEx
FreeEnvironmentStringsA
VerLanguageNameA
GlobalHandle
GetNumberFormatA
OpenMutexW
SetConsoleCP
WideCharToMultiByte
GetVolumePathNameA
FindFirstVolumeMountPointW
GetPrivateProfileStringA
LocalFree
GlobalGetAtomNameA
GetPrivateProfileIntA
GetBinaryTypeA
CreateSemaphoreW
FindNextVolumeW
GetTimeFormatW
EnumResourceNamesW
FileTimeToSystemTime
CreateWaitableTimerA
msvcrt
printf
Exports
Exports
F6reKl5ir
VHtGX
fOwpA
gQ0NZq7
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hdata Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 524B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ