O:\lTkt\bXduVbgcH\zjzXAdx\WzqyIevxwl.ppd
Static task
static1
Behavioral task
behavioral1
Sample
434.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
434.dll
Resource
win10v2004-20241007-en
General
-
Target
93bd57f88761c8840edc9e5dc5d7cb29_JaffaCakes118
-
Size
40KB
-
MD5
93bd57f88761c8840edc9e5dc5d7cb29
-
SHA1
2120d233107cdc163bc73d49c362807992e54618
-
SHA256
f10fabe69dd150cc5a38435dd77547d4e3532c19fccbb77c4f4e5cd658869cc4
-
SHA512
02e218471cb6922747cbd778c48ff7f59aecd0028c05fc9a76bb0e348ae81c4c31188451e3384bdd6185963659c79dcb7b37fd5e48e8d4eb31fac7142896ebf0
-
SSDEEP
768:J4UAVfwO/cOj6QA2uvn3LC2MrCWFJlSWuqTlUsIjnCmC8T5nQsqJd:WX+O/fFA2uf3W2jkX1lRIrCmTZQsqH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/434.tmp
Files
-
93bd57f88761c8840edc9e5dc5d7cb29_JaffaCakes118.rar
-
434.tmp.dll windows:5 windows x86 arch:x86
a846a933e83525fa400bd9636c07cde3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
gdi32
GetNearestColor
CreateFontIndirectA
CreateSolidBrush
EnumFontFamiliesExW
GetTextExtentPoint32W
GetTextMetricsW
EnumFontFamiliesW
ole32
CoTaskMemAlloc
CoTaskMemFree
kernel32
CreateSemaphoreW
GetWindowsDirectoryW
GetBinaryTypeA
lstrcpynW
SearchPathW
SetEndOfFile
ReleaseSemaphore
VirtualQuery
IsBadCodePtr
CompareStringA
GetLogicalDrives
LCMapStringW
RegisterWaitForSingleObject
user32
SetCaretPos
GetKeyNameTextW
GetScrollRange
MapWindowPoints
PostQuitMessage
AdjustWindowRect
SetLastErrorEx
SetWindowPos
EqualRect
AttachThreadInput
EnableWindow
SetSysColorsTemp
Exports
Exports
?_ZpRedJxqkqwnoyyuzu@@YGPAFF@Z
?Ntipqwcsnyn@@YGPAKMPAK@Z
?AnnhigcsdnrfrDvthkwz@@YGPAJDE@Z
?WzygewstekLHxcn@@YGPAEM@Z
?Ecmdvkyl@@YGFPAM@Z
?IypgfyvkgrtgObdtd@@YGIPAKE@Z
Sections
.itext Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ