macntriaum.pdb
Static task
static1
Behavioral task
behavioral1
Sample
311fefed14655fde31f8c09eb954c38a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
311fefed14655fde31f8c09eb954c38a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
311fefed14655fde31f8c09eb954c38a_JaffaCakes118
-
Size
156KB
-
MD5
311fefed14655fde31f8c09eb954c38a
-
SHA1
1c4d4654724498c6ff311fcd5047a75b00d7e2c9
-
SHA256
d4b15f6c91aa6047d75aaf9fc36e3c1f0d2dd885518658cd280bc4d420521da9
-
SHA512
1ab5bcab06387a642b7f39f6a7511b532cd01ba67b39fdbe9c93d898930bdc0165a4d66f203be91c38e5e9d2eddb747d4ac6590dedbfa4790b1670190dc14eae
-
SSDEEP
3072:W64m79OyY/eT1uRKpMVSMLuk7CZ4rUmiPjrW5j+IEUR58aDLXd:W6VOyY/ypYSMLupsNiPfWjP58sLXd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 311fefed14655fde31f8c09eb954c38a_JaffaCakes118
Files
-
311fefed14655fde31f8c09eb954c38a_JaffaCakes118.dll windows:4 windows x86 arch:x86
b30ec06487407f2ee20df40532218ff8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetShortPathNameA
CompareStringA
lstrlenA
lstrcmpA
GetVersionExA
GetModuleFileNameA
GetProcessHeap
SetFileAttributesA
MoveFileA
GetSystemTimeAsFileTime
GetFileTime
GetTempPathA
CloseHandle
GetFileSize
LocalFree
FormatMessageA
GetLastError
CreateFileA
InterlockedExchange
Sleep
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
HeapFree
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MapViewOfFile
MultiByteToWideChar
SearchPathW
FindResourceW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
UnmapViewOfFile
GetVersionExW
SetLastError
LoadResource
FindResourceExW
LoadLibraryExW
FreeLibrary
CreateFileMappingW
CreateFileW
GetLocaleInfoW
GetTickCount
HeapAlloc
ole32
CoInitialize
CoCreateInstance
CoUninitialize
user32
MessageBoxA
LoadStringA
advapi32
GetSecurityDescriptorOwner
Exports
Exports
bwwn
Sections
.text Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ