c:\users\philong\documents\visual studio 2010\Projects\MPGH Crossfire Public Hack\Release\MPGH Crossfire Public Hack.pdb
Static task
static1
Behavioral task
behavioral1
Sample
302bf05f4f2bb18eb25071a8855cf296_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
302bf05f4f2bb18eb25071a8855cf296_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
302bf05f4f2bb18eb25071a8855cf296_JaffaCakes118
-
Size
8KB
-
MD5
302bf05f4f2bb18eb25071a8855cf296
-
SHA1
2409451d74321186b7923c0a04d1a95f58c52ba4
-
SHA256
008ddb83e785e0b170fca0f85a43e249010b2a8a7f1dc934789dc7d65cf8bc09
-
SHA512
4fabdb16c949921699438e981e49981491cdc3e7e30c9e32f60a1406d4e9038d99b8038e8f0b2618b922fafe82c7cd745e35258c82a16aa49cc2e3e22a288d8b
-
SSDEEP
192:xWiq8eF2NkeCKkOQkeT8U6C3XHPGR6JHDV7:y8ee71kOQkc8U6O3PGiV7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 302bf05f4f2bb18eb25071a8855cf296_JaffaCakes118
Files
-
302bf05f4f2bb18eb25071a8855cf296_JaffaCakes118.dll windows:5 windows x86 arch:x86
8d293d6d8f9749079c4e78103f3ba863
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
Sleep
DisableThreadLibraryCalls
CreateThread
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
user32
GetSystemMetrics
MessageBoxA
msvcr100
__dllonexit
_onexit
_except_handler4_common
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_lock
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ