ptm32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2df093f7f9640efe444545977b5c8462_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2df093f7f9640efe444545977b5c8462_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2df093f7f9640efe444545977b5c8462_JaffaCakes118
-
Size
140KB
-
MD5
2df093f7f9640efe444545977b5c8462
-
SHA1
f1cfc270aaf3d7ecd36d0f4858a5277c11cf02b3
-
SHA256
81267c5add963b3cc9359e04e4bcf4d873093c09f4695d49b6b0581369338a2c
-
SHA512
920ed0af2066098eaf7da95732e394b1c5a587a76bce58154765243543be4e00986c01a6009f9be4f4c4b8f83cfd2de230836fb85b469c95014589abd2c75686
-
SSDEEP
3072:eaWTjUMjtXVKIVcx8sVDY+kqyIR2gIbyVWcwX2H+l9t/bN:eaujFckqyIR2gUyVWb2C9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2df093f7f9640efe444545977b5c8462_JaffaCakes118
Files
-
2df093f7f9640efe444545977b5c8462_JaffaCakes118.dll windows:4 windows x86 arch:x86
37c602cb7ed605c67443b088ebef069d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
CreateCursor
RegisterClassA
SendMessageA
UpdateWindow
SubtractRect
SetTimer
SetFocus
ScrollDC
CreateCaret
MoveWindow
MessageBoxA
IsChild
HideCaret
GetUpdateRect
SetCaretBlinkTime
GetCaretBlinkTime
CreateWindowExA
DestroyCaret
DestroyCursor
DrawCaption
DrawTextA
FlashWindow
GetClassNameA
OemToCharA
GetMenuInfo
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
advapi32
DeleteService
GetAclInformation
IsTokenRestricted
Exports
Exports
FuncProc
Sections
.text Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ