inthienrfacae.pdb
Static task
static1
Behavioral task
behavioral1
Sample
17635fc502da7a420117f76c66aa35c8_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
17635fc502da7a420117f76c66aa35c8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
17635fc502da7a420117f76c66aa35c8_JaffaCakes118
-
Size
68KB
-
MD5
17635fc502da7a420117f76c66aa35c8
-
SHA1
9e351ab93a3a3771be2546a4ef6e842922bd3194
-
SHA256
d170f30af1450b7bdf70540c4a1a165a005e0cf572dbd488333c1d2154adef1f
-
SHA512
f3a17abb1d4e433165116d4522b0aa364dd490fc831446f34be0eeef7e4d35f890d5877dc06820e35c17f0a21aac71e875bf5c316e1fe06b04fa3d69d7652bc6
-
SSDEEP
1536:ZAZaTCyBxVFy5/2zxATzuANmNewVJrAzTeis83W56W6c:ZaaTCQxrvVJsTeR83W5P6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17635fc502da7a420117f76c66aa35c8_JaffaCakes118
Files
-
17635fc502da7a420117f76c66aa35c8_JaffaCakes118.dll windows:4 windows x86 arch:x86
d01358ef385cb44d774188aa7ae6078e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
shlwapi
PathRemoveFileSpecA
PathFileExistsA
PathAppendW
PathRemoveFileSpecW
kernel32
EnterCriticalSection
Sleep
GetStartupInfoA
SetHandleCount
InterlockedIncrement
GetModuleFileNameA
HeapAlloc
GetLastError
TlsSetValue
TlsFree
SetLastError
LCMapStringA
GetOEMCP
SetUnhandledExceptionFilter
SetFilePointer
lstrcmpW
GetCurrentProcessId
GetLocalTime
UnhandledExceptionFilter
CreateFileA
LCMapStringW
HeapFree
GetStringTypeW
TlsAlloc
GetStdHandle
InterlockedDecrement
RaiseException
TerminateProcess
GetCurrentThreadId
GetFileType
GetCurrentProcess
VirtualAlloc
CreateFileW
LeaveCriticalSection
VerSetConditionMask
GetCommandLineW
QueryPerformanceCounter
HeapReAlloc
GetVersionExW
GetACP
VirtualFree
GetSystemTimeAsFileTime
MultiByteToWideChar
GetStringTypeA
IsDebuggerPresent
SetStdHandle
TlsGetValue
GetEnvironmentStringsW
GetTickCount
GetModuleFileNameW
GetConsoleOutputCP
LoadLibraryA
DeleteCriticalSection
GetCPInfo
VerifyVersionInfoW
HeapCreate
WriteConsoleA
ExitProcess
GetLocaleInfoA
FlushFileBuffers
GetConsoleMode
WideCharToMultiByte
GetPrivateProfileIntW
IsValidCodePage
WriteConsoleW
GetConsoleCP
CloseHandle
HeapSize
GetProcAddress
FreeEnvironmentStringsW
WriteFile
GetModuleHandleW
GetTempPathW
InitializeCriticalSectionAndSpinCount
advapi32
ConvertStringSidToSidA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
Exports
Exports
ccbudsje
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ