C:\Users\Pr0_HvHer69YoUrMuM\Desktop\ayy\ayy\Release\phack.pdb
Static task
static1
Behavioral task
behavioral1
Sample
484073f7b9d1c9fcedccfb67b31a02aa_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
484073f7b9d1c9fcedccfb67b31a02aa_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
484073f7b9d1c9fcedccfb67b31a02aa_JaffaCakes118
-
Size
1019KB
-
MD5
484073f7b9d1c9fcedccfb67b31a02aa
-
SHA1
b5dd99b382c9552321498175ebbf7284f192352c
-
SHA256
f2049fdd9fc1c5df4c3f0a19f2e531e417ff6c6b6501b3c561003d3876ef62d4
-
SHA512
881c80b77b15990fa5025badf873ff513021222551c5f0ead219753dc5211660ad0193c9db7ae58b3738374a638f1c7ccecfcb46ed20f073e6fe88d34a04931e
-
SSDEEP
24576:Maics33+CGXErNgfS55o6mRQGDUmYNoFvUhug:MaiF3kXErNgfS7mRQFmYnh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 484073f7b9d1c9fcedccfb67b31a02aa_JaffaCakes118
Files
-
484073f7b9d1c9fcedccfb67b31a02aa_JaffaCakes118.dll windows:6 windows x86 arch:x86
b7fbec521991046db5dd40b128ba7220
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
FreeLibraryAndExitThread
Sleep
DisableThreadLibraryCalls
CloseHandle
CreateThread
CreateDirectoryA
GetTickCount
VirtualProtect
IsBadCodePtr
QueryPerformanceFrequency
GetWindowsDirectoryA
QueryPerformanceCounter
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleHandleW
FindFirstFileA
FindNextFileA
VirtualQuery
HeapAlloc
GetProcessHeap
IsBadReadPtr
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
K32GetModuleInformation
GetCurrentProcess
GetProcAddress
GetTickCount64
LeaveCriticalSection
EnterCriticalSection
Beep
GetModuleHandleA
user32
CloseClipboard
GetKeyState
GetAsyncKeyState
FindWindowA
CallWindowProcA
SetWindowLongA
GetClientRect
SetCursor
SetClipboardData
GetClipboardData
EmptyClipboard
GetCursorPos
OpenClipboard
advapi32
RegOpenKeyExA
RegCloseKey
RegEnumValueA
msvcp140
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Xlength_error@std@@YAXPBD@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??Bios_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
winmm
PlaySoundA
imm32
ImmSetCompositionWindow
ImmGetContext
vcruntime140
_except_handler4_common
_CxxThrowException
memchr
strchr
__CxxFrameHandler3
strstr
memcmp
_purecall
memset
__std_exception_copy
memcpy
memmove
__std_exception_destroy
__std_type_info_destroy_list
api-ms-win-crt-math-l1-1-0
_fdtest
ceil
atan2
sqrt
acos
roundf
cos
fmaxf
sin
atan
floor
pow
fabs
fmod
_except1
api-ms-win-crt-utility-l1-1-0
rand
qsort
api-ms-win-crt-stdio-l1-1-0
ftell
fgetpos
setvbuf
fputc
ungetc
fsetpos
fread
_fseeki64
fgetc
_get_stream_buffer_pointers
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__acrt_iob_func
_wfopen
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
fseek
fflush
fclose
__stdio_common_vfprintf
fwrite
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-string-l1-1-0
strcmp
strncpy
wcslen
strcpy
isprint
_stricmp
isdigit
_strnicmp
strlen
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_wassert
api-ms-win-crt-convert-l1-1-0
mbstowcs_s
_itoa
atoi
api-ms-win-crt-time-l1-1-0
clock
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
Exports
Exports
?ReflectiveLoader@@YGKXZ
Sections
.text Size: 538KB - Virtual size: 537KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 340KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ