c:\331-Floor\sight\Ground\754\chair.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ce91cadf73722f864c4d40bcd6683dce_JaffaCakes118.dll
Resource
win7-20240221-en
General
-
Target
ce91cadf73722f864c4d40bcd6683dce_JaffaCakes118
-
Size
421KB
-
MD5
ce91cadf73722f864c4d40bcd6683dce
-
SHA1
6b8cc1c22c51512647d80f0de230fe6493cec3c5
-
SHA256
89c65e721261b388fe49e848ce8ff376f0728217a8edbdb1434e7df40b62768d
-
SHA512
03ab8d443a537bac585436e24212eb0139f1bce9a4f84b670588d80724c5990facae993e05b5623640042eef7fca0beb38bdb46ab3785961ffe9066d18c5c89c
-
SSDEEP
6144:gFvyrc/+PEa2S+sTZs/EqyHYO0f9YfGQMQavPeTCzLNzrkOXCxuXLle:+KZPEzs2/vygiOlFmUtzMu7le
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce91cadf73722f864c4d40bcd6683dce_JaffaCakes118
Files
-
ce91cadf73722f864c4d40bcd6683dce_JaffaCakes118.dll windows:6 windows x86 arch:x86
c27496098b0c2dd1f01696b972897787
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetEnvironmentVariableA
LoadLibraryA
OpenMutexA
GetModuleFileNameA
VirtualProtect
GetCurrentDirectoryA
GetFileTime
GetVersion
GetTempPathA
CloseHandle
WriteConsoleW
CreateProcessA
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
CreateEventA
GetWindowsDirectoryA
SetFilePointerEx
ExitProcess
GetDateFormatW
OutputDebugStringW
GetLastError
HeapFree
HeapAlloc
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
SetLastError
GetCurrentThread
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
CreateFileW
user32
LoadBitmapA
SetWindowTextA
CheckDlgButton
SendMessageTimeoutA
IsDialogMessageA
GetIconInfo
ole32
CoInitialize
CLSIDFromString
OleUninitialize
OleSetContainedObject
CoCreateInstance
OleInitialize
CoUninitialize
advapi32
RegCloseKey
RegCreateKeyA
RegQueryValueExA
xolehlp
DtcGetTransactionManagerExA
Exports
Exports
Beat
Brightdirect
Coldrather
Dividesudden
SugarAnd
Sections
.text Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 213KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ