c:\Acquired\In\Which\You\Africa.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4031efffc35fb7b8232497c5ef61f480_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4031efffc35fb7b8232497c5ef61f480_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
4031efffc35fb7b8232497c5ef61f480_JaffaCakes118
-
Size
126KB
-
MD5
4031efffc35fb7b8232497c5ef61f480
-
SHA1
ecdf916cdfd4618b6b0d2c4ab8f411ce39b0dde2
-
SHA256
33bcec02e03d54faeb7750582e9f3a043d50caabab40d77d5a77ac97997eb582
-
SHA512
f26830891a92d3e9ad77dcf839d913d99ad7d0edcb7d6c1c4bf58ae95cba32d94b731793010a9772a59302b783da416735cd56ba46df4ff6b16f0c645e68efa5
-
SSDEEP
3072:bOtxzjTZefTm6MToM5zhACMfaQEkWD5KAWhpTAijzmijsk2zzFWs9eMQ/:beHGGz5+7aQMD3WhlAsSapyBVj4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4031efffc35fb7b8232497c5ef61f480_JaffaCakes118
Files
-
4031efffc35fb7b8232497c5ef61f480_JaffaCakes118.dll windows:4 windows x86 arch:x86
0a103796c4833c257f121bf060920c48
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
UnhandledExceptionFilter
GetModuleHandleA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileAttributesExA
FileTimeToLocalFileTime
CreateFileA
GetLastError
Sleep
CloseHandle
GetModuleHandleW
GetVersion
GetConsoleCP
CompareStringA
user32
GetTopWindow
AdjustWindowRectEx
msvcrt
memmove
malloc
printf
strpbrk
strspn
strchr
atol
toupper
isdigit
tolower
feof
ferror
fread
memset
setvbuf
exit
fopen
fprintf
fclose
remove
time
ctime
Exports
Exports
IsAlsoCountryMiddle
MiddleOperationsExclusion
SpecificGuaranteesMicrosoftCentreServing
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xdata Size: 512B - Virtual size: 343B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1 Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3 Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ