C:\Users\Администратор\Desktop\BassPrivate\Debug\Admin.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1ac0e4876ba44db50fdda01189cdd8f1_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1ac0e4876ba44db50fdda01189cdd8f1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1ac0e4876ba44db50fdda01189cdd8f1_JaffaCakes118
-
Size
100KB
-
MD5
1ac0e4876ba44db50fdda01189cdd8f1
-
SHA1
7424059984f1c8f0e52382f3f0238772b5278073
-
SHA256
6727c71fd41e263388b0648fb7f517d5db3a040b2aff5ae20a93e685f30c9dc6
-
SHA512
dbe2d4226c9bef3ba022d044987118f3e6e4e80f2e37b310166f8558944b4b56396ce328c478abe5980dcb4a22f6a7d27bfab1620aee1d7c45c1f0c8904378c0
-
SSDEEP
768:0eGcccnaexvPsg4kpX6TdgaqSYXYHwcePAkoy+B5+FNYE86AukD4N4e6VPOB2gU0:0ccA5xhAGhx86KD0x6csgUbXmPoBA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ac0e4876ba44db50fdda01189cdd8f1_JaffaCakes118
Files
-
1ac0e4876ba44db50fdda01189cdd8f1_JaffaCakes118.dll windows:5 windows x86 arch:x86
49e6c7d25049d8abfad38722e4eca3c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
VirtualProtect
DeleteFileA
FreeLibrary
GetModuleHandleA
ExitProcess
ReadProcessMemory
GetCurrentProcess
Sleep
LoadLibraryA
ExitThread
CreateThread
DisableThreadLibraryCalls
GetDriveTypeA
GetModuleFileNameW
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LoadLibraryW
GetProcAddress
lstrlenA
RaiseException
MultiByteToWideChar
IsDebuggerPresent
WideCharToMultiByte
InterlockedCompareExchange
VirtualQuery
InterlockedExchange
DecodePointer
EncodePointer
user32
SetRect
GetAsyncKeyState
MessageBeep
d3dx9_43
D3DXCreateSprite
D3DXCreateFontA
D3DXCreateTextureFromFileInMemoryEx
msvcr100d
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_initterm_e
_initterm
_CrtSetCheckCount
_encoded_null
_free_dbg
_malloc_dbg
_CRT_RTC_INITW
exit
clock
sprintf
memset
malloc
memcpy
_amsg_exit
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ