hddoo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
14e2c120004538847485b060c66e9541_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14e2c120004538847485b060c66e9541_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
14e2c120004538847485b060c66e9541_JaffaCakes118
-
Size
153KB
-
MD5
14e2c120004538847485b060c66e9541
-
SHA1
15bd8a3baa790422399978859b7ee0e36c8ddb06
-
SHA256
297587f4aa0b296f5c63048937ad2a95de9f92c57fcfc92dc2d6468ae8b54ad8
-
SHA512
3959bf901a107e9d495c13dfc8e6876fbef162fba289bf7bc8fa6364a11c08df651ab9f4fd4c1c63700afb248f14f87941f3133c597a587679b578413f96fb7b
-
SSDEEP
1536:vKx5QB1Nwsge8r4/+Lb1KJD9a2E/mfY+PkwKOc1OpBBxlysg9v6O:vKQBbwLFr4mO9aPTl7SBVys6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14e2c120004538847485b060c66e9541_JaffaCakes118
Files
-
14e2c120004538847485b060c66e9541_JaffaCakes118.dll windows:4 windows x86 arch:x86
09595729425b606b870daaed5bb04b5f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
HeapFree
UnhandledExceptionFilter
MultiByteToWideChar
SetFilePointer
SetHandleCount
GetStdHandle
LCMapStringW
SetStdHandle
HeapCreate
InterlockedIncrement
user32
DestroyWindow
DefWindowProcW
SetWindowLongW
PostQuitMessage
TranslateMessage
ShowWindow
IsIconic
CloseWindow
SetWindowLongA
CreateWindowExA
DispatchMessageW
PeekMessageW
GetWindowLongW
comdlg32
ChooseFontA
GetSaveFileNameA
GetOpenFileNameA
ChooseFontW
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ole32
CreateBindCtx
StringFromIID
CoTaskMemFree
StringFromGUID2
IIDFromString
CoCreateInstance
CLSIDFromString
CoCreateFreeThreadedMarshaler
StringFromCLSID
Exports
Exports
ueHYhZuOK
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ