C:\Users\Adil Virani\blitz-client\packages\electron\node_modules\electron-overlay\build\Release\electron_overlay.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1332ececeb9cb9f78636974c8256038b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1332ececeb9cb9f78636974c8256038b_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
1332ececeb9cb9f78636974c8256038b_JaffaCakes118
-
Size
599KB
-
MD5
1332ececeb9cb9f78636974c8256038b
-
SHA1
820412a79be4a329fd093cf51521d9ecd9eee31e
-
SHA256
d6943ab9c462f8d00fa05f9e2ecd97594b8f84bc6344cc03ecf6d4af6569789d
-
SHA512
dbfabd24b453a2abaf9eee41eef529b643e4aeb2b611926bf1d7f309186dde2b755c015b7a012cbf8e7357ac25193202479e0c8fe6d190e1e7a7c4158c666454
-
SSDEEP
12288:C85TElKq5nUCrM+V4fhBEMxuqxDg4KAJWWUh1KNASNpqhX13965yZD7e3bNr9J5I:gwBAqRg4PUhMNTNpS1wyobNVJJIb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1332ececeb9cb9f78636974c8256038b_JaffaCakes118
Files
-
1332ececeb9cb9f78636974c8256038b_JaffaCakes118.dll windows:6 windows x86 arch:x86
ec5ce89d14971b806659a8fc26195ed5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CloseHandle
GetCurrentProcessId
WaitForSingleObject
OpenProcess
CreateEventW
SetEvent
LoadLibraryW
GetProcAddress
FreeLibrary
CreateMutexW
ReleaseMutex
UnmapViewOfFile
GetLastError
CreateFileMappingA
WideCharToMultiByte
MapViewOfFile
GetTickCount
VirtualQuery
GetModuleHandleW
LoadLibraryExA
GetSystemInfo
CreateFileW
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
SetFilePointerEx
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
ResetEvent
WaitForSingleObjectEx
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
Sleep
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
RtlUnwind
RaiseException
ExitThread
GetModuleHandleExW
GetStdHandle
GetFileType
WriteConsoleW
ExitProcess
HeapAlloc
HeapFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
WriteFile
FlushFileBuffers
user32
GetAsyncKeyState
GetMonitorInfoW
GetForegroundWindow
GetWindowLongW
GetWindowThreadProcessId
DefWindowProcW
PostMessageW
DestroyWindow
IsWindow
DispatchMessageW
MonitorFromWindow
PeekMessageW
GetWindowTextA
MsgWaitForMultipleObjectsEx
CreateWindowExA
TranslateMessage
SetWindowLongW
PostQuitMessage
SendMessageW
Exports
Exports
_register_electron_overlay_
Sections
.text Size: 453KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ