bdescr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2be0203ab4324baf77daafc6a49356db_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2be0203ab4324baf77daafc6a49356db_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2be0203ab4324baf77daafc6a49356db_JaffaCakes118
-
Size
13KB
-
MD5
2be0203ab4324baf77daafc6a49356db
-
SHA1
2825bf1780ac257bb5d33781c6a44edb0563d11c
-
SHA256
334ab4b65ff4fcd54217d449aafe3359f134a0768ba4847a0a72a534f466e912
-
SHA512
f974edb98f40474473d8f91d2b97761cf30e851cb21843e07a4ae80a9a11fdaedcca95c8ad651c1fb16817ddde7aad6ad795cd71f17aba46f67f77c268ab61d1
-
SSDEEP
192:Vyy1Coy+sbw99TwaC0sDkIyYCOgAIyuH53X3PVR6yf74/bR4hzSzh:M8Cv+sbwnXqkyCAAHFnPV5sF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2be0203ab4324baf77daafc6a49356db_JaffaCakes118
Files
-
2be0203ab4324baf77daafc6a49356db_JaffaCakes118.dll windows:5 windows x86 arch:x86
e488151cb853496c9380a6cb5f327572
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ida64.wll
netnode_kill
netnode_charval
netnode_supdel
netnode_sup1st
netnode_supnxt
get_flags_ex
callui
verror
get_demangled_name
inf
ph
qsnprintf
ea2str
get_name
get_byte
get_word
qstrncpy
qrealloc
qfree
msvcr100
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm
_encoded_null
free
_malloc_crt
memcpy
abort
strchr
_initterm_e
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
Exports
Exports
PLUGIN
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ