S:/error/wvopt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
36c4b2eb83830ee0c311f15b8bbd0f00_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
36c4b2eb83830ee0c311f15b8bbd0f00_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
36c4b2eb83830ee0c311f15b8bbd0f00_JaffaCakes118
-
Size
140KB
-
MD5
36c4b2eb83830ee0c311f15b8bbd0f00
-
SHA1
bfea58331409489f4f718ccd0067d629a56cf767
-
SHA256
655ec609fb52e2261ae00f9ef962b1866e026db644cb00f8ccb65694894b2c85
-
SHA512
b91bff11dea5e7f828a3e93765e181d3f0095389e717f58ffad6dd6f62ab5016672e56c1440729be697dbe709b4d26f6f0fb58c2e21b510591da93d3cce94390
-
SSDEEP
3072:jAoGYFxr4YMhM4rKYxoducPIKZU7p7HZaj:EBYROuYaIcgKZU9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36c4b2eb83830ee0c311f15b8bbd0f00_JaffaCakes118
Files
-
36c4b2eb83830ee0c311f15b8bbd0f00_JaffaCakes118.dll windows:4 windows x86 arch:x86
972b1c290cba06d347a956dbe715178f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
CreateDialogIndirectParamA
GetMessageA
UnionRect
IsWindow
GetMessagePos
ReleaseDC
gdi32
CreateFontIndirectA
DeleteObject
CreatePolygonRgn
SetBkMode
kernel32
GetFileType
GetThreadLocale
GetCurrentProcessId
GetFileAttributesW
GetFileSize
GetFileAttributesA
InterlockedCompareExchange
CreateEventW
GetModuleHandleA
GetModuleFileNameW
msvcrt
islower
isalpha
srand
Exports
Exports
export1
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ