C:\Documents and Settings\DIGIT\Desktop\SeCret Amo\Release\SeCret Amo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2f28cbcb9775e3796bb94014c360177c_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
2f28cbcb9775e3796bb94014c360177c_JaffaCakes118
-
Size
401KB
-
MD5
2f28cbcb9775e3796bb94014c360177c
-
SHA1
6cf53ff86f1692f7479c1fdddba0898578d14d3b
-
SHA256
35a18b736bb4a70f43655c80d6d4462a3cd08cd07619ce18622d8855dfca8f74
-
SHA512
49f016b63381451f891392881e53363b51c43530d7e3e632e1cd61f317acb4f5c650534c6648d3551cd3f414f57087d16d13cabf415a8563fe32ba4be6b32b0e
-
SSDEEP
6144:lycqzivUYHz/7JyQD7Ke8SQeeaQeeZQeesQeeGbQeehQeeniGWV4NeQXMbsimAn2:At2vUYL7k2zGDeSwvVvNK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f28cbcb9775e3796bb94014c360177c_JaffaCakes118
Files
-
2f28cbcb9775e3796bb94014c360177c_JaffaCakes118.dll windows:5 windows x86 arch:x86
99036a871b7589a0dcfd4e959b3affa0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CreateThread
GetModuleHandleA
DisableThreadLibraryCalls
IsBadWritePtr
Beep
IsBadReadPtr
ExitProcess
VirtualProtect
LoadLibraryA
VirtualProtectEx
VirtualAlloc
ReadProcessMemory
Sleep
GetCurrentProcess
MulDiv
EncodePointer
DecodePointer
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
VirtualFree
GetSystemInfo
IsProcessorFeaturePresent
OutputDebugStringA
user32
GetSystemMetrics
GetDesktopWindow
DefWindowProcA
CreateWindowExA
MessageBoxA
GetAsyncKeyState
RegisterClassExA
DestroyWindow
gdi32
GetCharacterPlacementA
GetCharacterPlacementW
GetTextExtentPoint32A
SetTextColor
DeleteDC
GetGlyphOutlineA
CreateFontA
GetDeviceCaps
SetBkColor
DeleteObject
SelectObject
CreateCompatibleDC
SetMapMode
GetTextMetricsA
GetObjectW
CreateDIBSection
CreateFontIndirectW
ExtTextOutW
MoveToEx
GetObjectA
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
SetBkMode
ExtTextOutA
SetTextAlign
msvcr100
iswalpha
_CIsqrt
memset
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
??3@YAXPAX@Z
malloc
memmove
vsprintf
??2@YAPAXI@Z
free
ceil
_mbsnbcpy
_ftol
strncpy
_CIacos
_finite
iswpunct
iswdigit
iswspace
modf
__CxxFrameHandler
floor
d3d9
Direct3DCreate9
wininet
InternetOpenA
InternetOpenUrlA
InternetReadFile
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
Sections
.text Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE