eetup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
569b5d2e4e846f5691ec7b5f7aeda540_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
569b5d2e4e846f5691ec7b5f7aeda540_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
569b5d2e4e846f5691ec7b5f7aeda540_JaffaCakes118
-
Size
175KB
-
MD5
569b5d2e4e846f5691ec7b5f7aeda540
-
SHA1
81db03601938deae21da687cf15841a78c4ea2a8
-
SHA256
e75910a6b41df59a456168d0d03928ed2a7a207266117c371408a05011544c47
-
SHA512
f55488ea1fd0596cde7785f519341b29b131b9205a968e832765f412eed6d591b29051176f334344e1a03f09783df97bad5a732b9484c1f0be7da5e03fef7068
-
SSDEEP
3072:B3L9n+MNOhnA1V47XDWGP9lpZk4+0wlUPvLdgGaKd3FqT57NO/lDqTpKkPjZipu:B3L9se47zWaw4+0wIXVUk/lD+pKc656w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 569b5d2e4e846f5691ec7b5f7aeda540_JaffaCakes118
Files
-
569b5d2e4e846f5691ec7b5f7aeda540_JaffaCakes118.dll windows:5 windows x86 arch:x86
6e1a1b024a09b4ee08e5a1d9b5bc6bf4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
shell32
SHCreateDirectoryExW
CommandLineToArgvW
SHGetSpecialFolderLocation
msvcrt
wprintf
wcsstr
printf
memset
free
exit
_wcslwr
_wcsdup
_ismbblead
_exit
_controlfp
_cexit
_amsg_exit
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__getmainargs
_XcptFilter
_initterm
user32
IsWindow
gdi32
ArcTo
PolyDraw
kernel32
lstrlenW
VirtualProtect
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
ExitProcess
Sleep
SetUnhandledExceptionFilter
InterlockedExchange
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
FindNextFileW
FindFirstFileW
TerminateProcess
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
Exports
Exports
ASet
CleanupFileNameInPlaceA
DeleteTempFile
DeleteTempFileOnShutdown
HrLPSZCPToBSTR
HriCopyStreamCB
HriCopyStreamToByte
PVDecodeObject
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ