U:\rel\hl2\src\inputsystem\Release\inputsystem.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1a2994499a4f1e54580fb3a70aa2e3ba_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a2994499a4f1e54580fb3a70aa2e3ba_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
1a2994499a4f1e54580fb3a70aa2e3ba_JaffaCakes118
-
Size
132KB
-
MD5
1a2994499a4f1e54580fb3a70aa2e3ba
-
SHA1
c10236fc92fb0885d2bb06ae209710fd96ed8812
-
SHA256
d57a7a5fedc44b89408a75ec77b6fc970a190c99ed9ef7b4ccc05138a783d639
-
SHA512
7452e00d9217095b733fa20b3646869ca6b9d6fb0b63c713c3ea329d41a7a5068b1fb09498fb3d33e7128dd330c92d45ae3346a1b98246a56a09fe30bc446a76
-
SSDEEP
3072:FPmCQ1spntXlwkGjvqcC9M5OhfkRHx01x5:FuB1sp07ZCvhIxW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a2994499a4f1e54580fb3a70aa2e3ba_JaffaCakes118
Files
-
1a2994499a4f1e54580fb3a70aa2e3ba_JaffaCakes118.dll windows:4 windows x86 arch:x86
4adae137867b39fd1c1a95a9b24dd3f4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
winmm
joyGetNumDevs
joyGetPosEx
joyGetDevCapsA
kernel32
GetStdHandle
GetTickCount
GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualAlloc
VirtualProtect
GetLocaleInfoA
CloseHandle
FlushFileBuffers
SetStdHandle
GetProcAddress
GetModuleHandleA
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
IsBadCodePtr
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
InterlockedExchange
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
user32
PeekMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
GetFocus
GetWindowLongA
SetWindowLongA
tier0
_AssertValidWritePtr
AssertValidStringPtr
DevMsg
g_pMemAlloc
Warning
vstdlib
GetCVarIF
Exports
Exports
CreateInterface
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ