nidafol.pdb
Static task
static1
Behavioral task
behavioral1
Sample
44d835fb5c665ebefb4875d34de29519_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
44d835fb5c665ebefb4875d34de29519_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
44d835fb5c665ebefb4875d34de29519_JaffaCakes118
-
Size
164KB
-
MD5
44d835fb5c665ebefb4875d34de29519
-
SHA1
71b759d3856f1adf0857bdad4359d8e21f738c9e
-
SHA256
8954956216df587548cb6e49e92bd2a534c4a57a33e6c12144bebbd4e7588a60
-
SHA512
7a9d470cfbf75f21016bdeb0dc5787ccfa6e662b2b37a02930a3dd26cec60f93f5eec82627a04aeb7dd1b877e8290614494a4d0025f46106a83ade66485192cf
-
SSDEEP
3072:gvsJ7viwPQyYkn+GUbRX0mWGl6atm0ye3kmqxVJpBk1/Qc8+k8t:gjwjL+GUdXzWGYlcqf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44d835fb5c665ebefb4875d34de29519_JaffaCakes118
Files
-
44d835fb5c665ebefb4875d34de29519_JaffaCakes118.dll windows:4 windows x86 arch:x86
e0124f6dd20adf0bbe97d73e08e1dfee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
InflateRect
GetWindowRect
GetSysColorBrush
CharUpperA
CloseWindow
DrawIcon
EndPaint
EnableWindow
DrawTextW
wsprintfW
FrameRect
SetWindowTextW
GetWindowTextW
GetScrollPos
FindWindowW
EndDialog
EnableMenuItem
DrawCaption
GetSystemMetrics
GetQueueStatus
GetClassInfoA
GetCursorPos
GetFocus
GetMessageA
GetParent
LoadCursorW
GetNextDlgTabItem
ShowScrollBar
GetMenuInfo
advapi32
RegRestoreKeyA
CryptGenKey
CryptDecrypt
CryptEncrypt
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegReplaceKeyA
Exports
Exports
TFaAOGDee
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shared Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ