C:\Users\Marco\documents\visual studio 2010\Projects\Cytriik Trainer\Release\Cytriik Trainer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0d24741f8f3c8ee56f6ebe74933bf6ba_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0d24741f8f3c8ee56f6ebe74933bf6ba_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
0d24741f8f3c8ee56f6ebe74933bf6ba_JaffaCakes118
-
Size
21KB
-
MD5
0d24741f8f3c8ee56f6ebe74933bf6ba
-
SHA1
c9f53eb70c27c9da49e3288278013e081155823e
-
SHA256
92ba17fba26566c78f058da80abdf0f985944c25434fcb505a31842e11bbe565
-
SHA512
26cc1108029ac58221338f49af23472c49c1fb1f86d043ac9e26227a5929fb6b92be1536467fae7976ca29323ee1be155a5971a6d96c6229ea118598159dbe5d
-
SSDEEP
384:UbQC5C3QEp1JTmvMBp1pPYsqOtkhlI2/J2PGasUPEA8W:UbQC5C3QEprWM/16sL6h0+AEPW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d24741f8f3c8ee56f6ebe74933bf6ba_JaffaCakes118
Files
-
0d24741f8f3c8ee56f6ebe74933bf6ba_JaffaCakes118.dll windows:5 windows x86 arch:x86
26aa9d41d397362c4029f77808c1ebba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetCurrentProcess
GetModuleHandleW
GetCurrentThread
OpenProcess
Sleep
ReadProcessMemory
GetLastError
GetProcAddress
DisableThreadLibraryCalls
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
CreateThread
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
FlushInstructionCache
VirtualProtect
SetLastError
GetSystemTimeAsFileTime
user32
GetAsyncKeyState
FindWindowA
SetTimer
GetMessageW
PostQuitMessage
KillTimer
TranslateMessage
IsDialogMessageW
DispatchMessageW
PeekMessageW
ShowWindow
CreateDialogParamW
MessageBoxW
UpdateWindow
EnableWindow
msvcr100
__clean_type_info_names_internal
_vswprintf_c_l
wcsstr
_except_handler4_common
??2@YAPAXI@Z
memcpy
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
??3@YAXPAX@Z
_unlock
__dllonexit
_lock
_onexit
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ