c:\Or\And.pdb
Static task
static1
Behavioral task
behavioral1
Sample
26f8b66c8152405f60c12864f72c6c10_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
26f8b66c8152405f60c12864f72c6c10_JaffaCakes118
-
Size
143KB
-
MD5
26f8b66c8152405f60c12864f72c6c10
-
SHA1
c0b993bc79469fd14af00b4f144e331b07effb96
-
SHA256
93533130935fd490c7bbd44d74bf09fc74253f46f7d360b110e5d42319de1293
-
SHA512
864f1400c3942a9d6c1d66fb045decf61c8056b12ba15058de274d4066703aa268153b2bd6a67364bf271e392d34ae578267aa8e93156ac729d575177c957af5
-
SSDEEP
3072:88vix5OOOOOOOOOLoE/105nZ/KWRXwRBNGXCN:laDOOOOOOOOOLoO2aWykyN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26f8b66c8152405f60c12864f72c6c10_JaffaCakes118
Files
-
26f8b66c8152405f60c12864f72c6c10_JaffaCakes118.dll windows:4 windows x86 arch:x86
810d506e285496e30138ba8d078dcfa2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetPrivateProfileIntW
GetSystemDirectoryW
GetPrivateProfileStringW
CreateSemaphoreW
WaitForSingleObject
InitializeCriticalSection
HeapFree
GetProcessHeap
ReleaseActCtx
WideCharToMultiByte
ActivateActCtx
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
CreateEventW
EnterCriticalSection
UnhandledExceptionFilter
QueryPerformanceCounter
GetLastError
CreateThread
ReleaseMutex
SetEvent
RemoveDirectoryW
WriteFile
lstrcmpiW
GetConsoleWindow
GetTempPathA
LeaveCriticalSection
DisableThreadLibraryCalls
GetModuleHandleW
user32
IsCharUpperA
MsgWaitForMultipleObjects
advapi32
RegSetValueExW
RegCloseKey
ole32
CoTaskMemFree
StringFromIID
msvcrt
time
memset
iphlpapi
GetNumberOfInterfaces
Exports
Exports
ArePlatformIncorporateLater
EndorsedThatTime
PlatformTimeSMTechnologyInto
TechnologyOnToIncorporated
Sections
.text Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 8KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ