F:\WorkRoot\SPISolution\Release\SPIServerDLL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
27bb01307bbd24377ad54955145191a7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27bb01307bbd24377ad54955145191a7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
27bb01307bbd24377ad54955145191a7_JaffaCakes118
-
Size
80KB
-
MD5
27bb01307bbd24377ad54955145191a7
-
SHA1
872c2342b30611937b8403f66d3cdb03392c75eb
-
SHA256
47607b966597ced47992bf091bc045b9484695d5586d881edcb65f7085d5ec77
-
SHA512
1e73a8c43460aea8bb7d3f40b61a608d18c3e915f0f7a59bc311404a8e4463cd3c1f64e8443f38eb571296983dccc32e17ef2d4ed0a0e271fb50b4686b270acf
-
SSDEEP
1536:6XXAgpfSlAUaxrGCC4qdRpr3dipR6s3NcGePEykTu8m10qWXB:6nA+fQAUsivR2pB3OG5u8m10pXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27bb01307bbd24377ad54955145191a7_JaffaCakes118
Files
-
27bb01307bbd24377ad54955145191a7_JaffaCakes118.dll windows:5 windows x86 arch:x86
b912d3b78fd8fa2e567284bd5ab5c4cc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
FindResourceExW
CloseHandle
CreateThread
WaitForSingleObject
ReadFile
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetVersionExW
DisconnectNamedPipe
FindResourceW
CreateEventW
CreateNamedPipeW
ResumeThread
Sleep
TerminateThread
ConnectNamedPipe
ResetEvent
GetOverlappedResult
GetTickCount
SizeofResource
LockResource
LoadResource
GetLastError
WriteFile
OutputDebugStringW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapDestroy
EncodePointer
DecodePointer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
ExitProcess
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
CreateFileW
FlushFileBuffers
user32
SendMessageW
advapi32
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorSacl
Exports
Exports
KeepLive
SetReponse_Callback
SetRequest_Callback
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ