T:\iyclecIKufsh\HAwhMSkbp\wMEcUvJczdpyl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
39f359b1d6a8e3b238d54a6861ccd1ed_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39f359b1d6a8e3b238d54a6861ccd1ed_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
39f359b1d6a8e3b238d54a6861ccd1ed_JaffaCakes118
-
Size
3.5MB
-
MD5
39f359b1d6a8e3b238d54a6861ccd1ed
-
SHA1
a2e74c971f67a2a844319f62460aac6482adf728
-
SHA256
e0d8f378c60c3f059cfa531be3f552222ec9468e1a551bb92dcdba710fffc0e9
-
SHA512
7f49ce6487b6e5ddf05f0585bf1b4c9124c91eed8d0198f495974334fb695d7340341db71ae4610e080d61bde816e60e9737f0b686e59683cfea575e3e39db32
-
SSDEEP
3072:da/fT8nSPDyBL4ORnMAhr1yw649iS3BAarBQ/sVsVuSOUwQ:WT8nftDD/i+Aa1csmYSNp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39f359b1d6a8e3b238d54a6861ccd1ed_JaffaCakes118
Files
-
39f359b1d6a8e3b238d54a6861ccd1ed_JaffaCakes118.dll windows:5 windows x86 arch:x86
3982be96351b4ffc13f6d328116fcec6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
gdi32
BeginPath
CreateHatchBrush
ExtTextOutA
CreateICW
PtInRegion
GetTextExtentPointA
shlwapi
ChrCmpIW
msvcrt
_controlfp
strlen
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
ungetc
_exit
wcspbrk
_cexit
__setusermatherr
__getmainargs
kernel32
LoadLibraryA
HeapValidate
LoadLibraryW
IsValidLocale
GetCommModemStatus
GetModuleHandleW
GetModuleFileNameA
LoadLibraryExA
lstrlenA
GetFileAttributesExW
lstrcatA
user32
DrawEdge
DialogBoxIndirectParamA
DefDlgProcW
SendNotifyMessageW
ShowWindowAsync
MonitorFromPoint
MonitorFromRect
GetSysColor
IsCharUpperW
GetForegroundWindow
GetWindowDC
ShowCursor
CloseDesktop
GetClassNameW
EnumThreadWindows
KillTimer
GetKeyboardLayoutNameW
wsprintfW
GetParent
Exports
Exports
Run|U
SensNotifyNetconEve|U
SensNotifyRasEve|U
SensNotifyWinlogonEve|U
ServiceMa|U
Start|U
��H|U
?CreateDlgMessage@@YGHPAXPADK|U
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xyz Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 104KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE