C:\avi_dll_86\dll\Release\Test01.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a025bf940882b77993185b7b9abe73ab_JaffaCakes118.dll
Resource
win7-20240221-en
General
-
Target
a025bf940882b77993185b7b9abe73ab_JaffaCakes118
-
Size
381KB
-
MD5
a025bf940882b77993185b7b9abe73ab
-
SHA1
973f4f28d656949862e0fc0e0e0f371858aa1da7
-
SHA256
b9879d2af3dbcd380c1895d78f26e41782fd2c08c324d459a86476bfdb762f4d
-
SHA512
1cf70df6a3c6a78e7f76b8f84b1b0751a10a85042d6b3011e4debdfedbce200c19dd5c5171fe43bebe34a1978b1a0e51813a06345b698fa4298ec46d9fca0684
-
SSDEEP
6144:d6w6ZtlHId99S/FEPVb91cpIp0jTLg6+grUesV3LPmCUbLNpjz:d6r5IdutEPFf6VjHgaq3TgXz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a025bf940882b77993185b7b9abe73ab_JaffaCakes118
Files
-
a025bf940882b77993185b7b9abe73ab_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
dab55116faaa0071397d3d6dcc79a12c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
MultiByteToWideChar
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetStdHandle
LockResource
SizeofResource
LoadResource
FindResourceA
Sleep
CreateThread
lstrlenA
VirtualAlloc
IsBadReadPtr
VirtualProtect
VirtualQuery
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
HeapAlloc
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
WideCharToMultiByte
LCMapStringW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetModuleFileNameW
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
IsProcessorFeaturePresent
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
WriteConsoleW
SetStdHandle
CreateFileW
Exports
Exports
Assist
Buget
CertD
DllRegisterServer
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 274KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ