c:\Users\WSA\Desktop\CABASE PRA GALERA\Release\CABASE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2c54ab06dc7e6d132a5eeb4c2259bef6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c54ab06dc7e6d132a5eeb4c2259bef6_JaffaCakes118.dll
Resource
win10v2004-20240708-en
General
-
Target
2c54ab06dc7e6d132a5eeb4c2259bef6_JaffaCakes118
-
Size
363KB
-
MD5
2c54ab06dc7e6d132a5eeb4c2259bef6
-
SHA1
235f0948f02231941e921ad80231300e3b44e7eb
-
SHA256
2ec0837a045bdb7215f8dfe833433278cace6cd123c09e30f3fa2c8e2fea680b
-
SHA512
286045b0f1811bccbbe8663d47279fca54b9b266d3f0796d25bebf2277f335ac1bd620a2759158e95f12f5f3e9b06db18de7e1aa674189f1cabd586676809078
-
SSDEEP
6144:nfgCUYdfm4y/mQE8u2QeeaQeeJQeesQee73QeehQeeaWA7aZGFVn55AORKwvQM3m:n4CUYd+zBFA7aZa5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c54ab06dc7e6d132a5eeb4c2259bef6_JaffaCakes118
Files
-
2c54ab06dc7e6d132a5eeb4c2259bef6_JaffaCakes118.dll windows:5 windows x86 arch:x86
8fcf3506980c8ecfabc64a6604e3447d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
RtlUnwind
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
CloseHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
VirtualQuery
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetLastError
WriteFile
IsProcessorFeaturePresent
GetSystemInfo
OutputDebugStringA
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
VirtualProtect
CreateThread
GetModuleHandleA
DisableThreadLibraryCalls
SetHandleCount
Sleep
user32
GetAsyncKeyState
GetCursorPos
SetRect
gdi32
SetTextAlign
ExtTextOutA
MoveToEx
SetMapMode
CreateCompatibleDC
CreateFontIndirectW
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
SetBkMode
SetBkColor
SetTextColor
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
DeleteObject
DeleteDC
CreateDIBSection
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
GetObjectA
ExtTextOutW
advapi32
RegQueryValueExA
RegOpenKeyA
RegCloseKey
Sections
_TEXT Size: 512B - Virtual size: 431B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ