wfdvfile.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0b042705d5032077eae0a43a1ff39052_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b042705d5032077eae0a43a1ff39052_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0b042705d5032077eae0a43a1ff39052_JaffaCakes118
-
Size
332KB
-
MD5
0b042705d5032077eae0a43a1ff39052
-
SHA1
cbbb73712e554af2a370b9c0a35d0c9992bd9941
-
SHA256
854350a804453da72f35d1c074a19ca8d593ed124194b2f1ee2e8046d2f786dc
-
SHA512
334c7b0273bd7fc62e6ff9d32bac1a01045fc243887d78d166ab15245c6e4f3d080c42115bb4336551fe8a911cdd4bda9035bacc09dff6cdb9bfab41ea92f58b
-
SSDEEP
6144:zhUwBgvehhkkkkckkkkbkkkhkkWkzIDvsssssssr:F4ve/kkkkckkkkbkkkhkkWJvsssssss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b042705d5032077eae0a43a1ff39052_JaffaCakes118
Files
-
0b042705d5032077eae0a43a1ff39052_JaffaCakes118.dll windows:4 windows x86 arch:x86
eb2e45dad1fe7af15e5f7e35fc93b3be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
DefWindowProcW
ShowWindow
PostQuitMessage
SetWindowLongW
GetWindowLongW
CloseWindow
AnimateWindow
FindWindowA
DestroyWindow
DispatchMessageW
GetParent
PeekMessageW
SetDlgItemTextW
TranslateMessage
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExW
ole32
CoTaskMemFree
StringFromCLSID
CLSIDFromString
CreateBindCtx
StringFromIID
IIDFromString
StringFromGUID2
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoInitializeEx
version
GetFileVersionInfoA
VerQueryValueA
Exports
Exports
uRDyJBAro
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 546KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ