perfos.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1085901857c16b3c5211a7ed2f1612ef_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1085901857c16b3c5211a7ed2f1612ef_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
1085901857c16b3c5211a7ed2f1612ef_JaffaCakes118
-
Size
86KB
-
MD5
1085901857c16b3c5211a7ed2f1612ef
-
SHA1
b9b94abf336056e83df8ddbd9b6a28e3ae9e6297
-
SHA256
3936a326634acafc7aeaf78219d472087d4f809e03d3a1ace171327630379035
-
SHA512
4703788d7c31749444d78e6e5da66546eb3586868b68ef7447d480941a968ade9b9eb51268585659f402adab15f2959c00afaf05f76834fc9457a2dea6e42ea3
-
SSDEEP
1536:ZI1FEI0KFGCfrreJM8vN0CiStkHBRrD0v8mVqequAOjyiXnqyMW:sEI0ibrtc0RWkhRM0rkAL+GW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1085901857c16b3c5211a7ed2f1612ef_JaffaCakes118
Files
-
1085901857c16b3c5211a7ed2f1612ef_JaffaCakes118.dll windows:5 windows x86 arch:x86
d9058d6d5cdf445d9ae9b1012727f1ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
free
_initterm
_adjust_fdiv
malloc
memmove
ntdll
RtlNtStatusToDosError
NtQuerySystemInformation
RtlIntegerToUnicodeString
NtQueryObject
NtClose
NtQueryValueKey
NtOpenKey
RtlInitUnicodeString
kernel32
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CloseHandle
HeapAlloc
lstrlenW
HeapCreate
HeapDestroy
HeapFree
DisableThreadLibraryCalls
lstrcpyW
CreateFileMappingA
CreateMutexA
CreateSemaphoreA
CreateEventA
advapi32
DeregisterEventSource
RegCloseKey
RegisterEventSourceW
RegOpenKeyExW
RegQueryValueExW
ReportEventA
Exports
Exports
CloseOSObject
CollectOSObjectData
OpenOSObject
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ