aclui.pdb
Static task
static1
Behavioral task
behavioral1
Sample
386c2fbdcae30de7f90e1e8727dbabdd_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
386c2fbdcae30de7f90e1e8727dbabdd_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
386c2fbdcae30de7f90e1e8727dbabdd_JaffaCakes118
-
Size
112KB
-
MD5
386c2fbdcae30de7f90e1e8727dbabdd
-
SHA1
4254911790e88f9a56068e93cbd93fa19274db2a
-
SHA256
a0a2742e7d30becac138165aff441f9575c16028a7ab321d92bede848599c27c
-
SHA512
4a88b16f6fafc94ea19ef6ec72a608f53740357839d4832d7385b13507d22f197507b30f14b389bd8b2a3e1c380e9560fbf9460130c4e135e698b9225debb0a5
-
SSDEEP
3072:t0uYTWxBqiAD5wfrKM/UqWtO61gNjy0zbq3xrm:nYPiHK+vXNBPq3x6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 386c2fbdcae30de7f90e1e8727dbabdd_JaffaCakes118
Files
-
386c2fbdcae30de7f90e1e8727dbabdd_JaffaCakes118.dll windows:5 windows x86 arch:x86
1e26d6a0b0e3567b2b14462bc7c8c709
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntdll
RtlFreeUnicodeString
RtlCreateUnicodeString
_itow
wcslen
NtQueryVirtualMemory
RtlUnwind
_chkstk
RtlLengthSid
kernel32
SetUnhandledExceptionFilter
lstrcpyW
LockResource
LoadResource
FindResourceW
UnhandledExceptionFilter
GetCurrentThread
GetProcAddress
InitializeCriticalSection
InterlockedExchange
RaiseException
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedDecrement
lstrcatW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcmpiW
lstrlenW
GetTickCount
InterlockedIncrement
SetLastError
GlobalLock
GlobalUnlock
LoadLibraryW
CreateThread
GetModuleHandleW
FreeLibraryAndExitThread
LocalSize
WaitForSingleObject
GetCurrentProcess
GetLastError
lstrcpynW
CloseHandle
CompareStringW
DisableThreadLibraryCalls
FreeLibrary
LocalFree
LocalAlloc
LoadLibraryA
GetWindowsDirectoryW
GetModuleFileNameW
FormatMessageW
user32
RegisterClassW
LoadBitmapW
SetWindowTextW
GetWindowTextW
GetScrollInfo
OffsetRect
ScrollWindow
DefWindowProcW
MapDialogRect
SystemParametersInfoW
ScreenToClient
ChildWindowFromPoint
SetScrollInfo
InflateRect
SetScrollPos
GetDC
GetWindow
GetDlgItemTextW
PostMessageW
SendDlgItemMessageW
GetWindowRect
MapWindowPoints
SetWindowPos
GetSysColorBrush
SetDlgItemTextW
IsWindowEnabled
WinHelpW
GetWindowLongW
LoadCursorW
SetCursor
ShowWindow
GetClientRect
GetSystemMetrics
CheckDlgButton
IsDlgButtonChecked
SetWindowLongW
GetParent
MessageBoxW
GetFocus
SetFocus
EnableWindow
DialogBoxParamW
EndDialog
LoadIconW
GetDlgItem
SendMessageW
LoadStringW
CreateWindowExW
RegisterWindowMessageW
RegisterClipboardFormatW
FrameRect
GetSysColor
DrawFocusRect
ReleaseDC
ShowScrollBar
DestroyWindow
MoveWindow
GetDlgCtrlID
gdi32
CreateFontIndirectW
GetObjectW
DeleteObject
SetBkMode
SetTextColor
GetTextExtentPoint32W
SetBkColor
shlwapi
StrRChrW
StrChrW
PathAppendW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenThreadToken
DuplicateTokenEx
AdjustTokenPrivileges
SetThreadToken
CopySid
LsaLookupSids
GetSidSubAuthority
GetLengthSid
ConvertSidToStringSidW
EqualSid
GetSecurityDescriptorSacl
GetSecurityDescriptorDacl
GetSecurityDescriptorControl
InitializeAcl
LsaClose
LsaFreeMemory
LsaQueryInformationPolicy
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorSacl
IsValidSid
GetTokenInformation
OpenProcessToken
GetSecurityDescriptorOwner
SetSecurityDescriptorOwner
LsaOpenPolicy
GetSidSubAuthorityCount
LookupAccountNameW
IsValidSecurityDescriptor
EqualPrefixSid
ole32
CoUninitialize
CoCreateInstance
ReleaseStgMedium
CoInitialize
oleaut32
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SysReAllocStringLen
SysFreeString
SafeArrayAccessData
Exports
Exports
CreateSecurityPage
EditSecurity
IID_ISecurityInformation
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ