dpamnlrd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
803482d842575c5bcb8cd5082d09f034_JaffaCakes118.dll
Resource
win7-20240419-en
General
-
Target
803482d842575c5bcb8cd5082d09f034_JaffaCakes118
-
Size
1.2MB
-
MD5
803482d842575c5bcb8cd5082d09f034
-
SHA1
b84814b784597703a722edc11563e49dc0c16515
-
SHA256
dc8f78c6a53282cabb3e927485a34e2dcf018d3493baf07635cac74cb908ba39
-
SHA512
4e7303b8bbbd09ae8c41f3899a29c437c96931fda762d380dceb4156c168bdb9ce66533720a7dadb9802039cb79e5fd18b34fbf99ff18ab9477ca0c9fdf4b121
-
SSDEEP
24576:NyTonNVlKTt/Q5ECvVP7hpJMvjtKpvPf9+m6kLRqgSyI:NyWRKTt/QlPVp3h9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 803482d842575c5bcb8cd5082d09f034_JaffaCakes118
Files
-
803482d842575c5bcb8cd5082d09f034_JaffaCakes118.dll windows:5 windows x64 arch:x64
687efd2fbde0f23e458ecdcacb3fde47
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
InsertMenuW
DrawIconEx
DrawStateW
DrawTextW
gdi32
GetCharWidthW
GetSystemPaletteEntries
GetTextExtentExPointI
GetCharWidth32A
GetViewportOrgEx
DeleteEnhMetaFile
GetWindowExtEx
kernel32
FreeResource
FillConsoleOutputCharacterA
DeleteTimerQueueTimer
GetThreadId
LoadLibraryA
lstrcmpiW
GetPrivateProfileStringW
GetCurrentThread
GlobalDeleteAtom
VirtualAlloc
DebugActiveProcess
GetCommProperties
ConvertDefaultLocale
GetNLSVersion
GetLastError
GetThreadTimes
GetEnvironmentStringsW
advapi32
GetSecurityDescriptorSacl
LookupAccountSidA
DecryptFileW
DeregisterEventSource
comdlg32
GetFileTitleW
Exports
Exports
CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
Sections
.text Size: 909KB - Virtual size: 909KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ