c:\Documents and Settings\Graha Net\Desktop\Unknown PK1\Release\Replace_PKJr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
36c1118189bdd26fdabba273bfa06cae_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36c1118189bdd26fdabba273bfa06cae_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
36c1118189bdd26fdabba273bfa06cae_JaffaCakes118
-
Size
36KB
-
MD5
36c1118189bdd26fdabba273bfa06cae
-
SHA1
8a4d6c38e9b6b069ab47ae3785c3d6a3dd521507
-
SHA256
ec03f212a89ebef527e2636b769ffbe6c5ef2577df6920e02b44367831858f1b
-
SHA512
47003534eb23465001b283185c2008b17033daa9343801e5044ab0425f26b670960975a1b313750d586ba9d2d3f9f07384bb3342882b037d0daa7a37522a5008
-
SSDEEP
768:GJITZf9WuT9Tnj0Hue4fGe+xXhcTUCaA:GqzT9Tj0Oe4+ZuYCaA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36c1118189bdd26fdabba273bfa06cae_JaffaCakes118
Files
-
36c1118189bdd26fdabba273bfa06cae_JaffaCakes118.dll windows:5 windows x86 arch:x86
0409b5c169051adccf5c209f7688412a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
CreateThread
ExitProcess
Sleep
GetModuleHandleA
ReadProcessMemory
IsBadWritePtr
VirtualAlloc
MulDiv
VirtualProtect
GetCurrentProcess
IsDebuggerPresent
GetSystemTimeAsFileTime
user32
GetAsyncKeyState
MessageBeep
RegisterClassExA
GetDesktopWindow
CreateWindowExA
DestroyWindow
DefWindowProcA
GetSystemMetrics
gdi32
CreateDIBSection
SetMapMode
GetDeviceCaps
CreateFontA
SelectObject
SetTextColor
SetBkColor
SetTextAlign
GetTextExtentPoint32A
ExtTextOutA
DeleteObject
DeleteDC
CreateCompatibleDC
msvcr90
free
memmove
??2@YAPAXI@Z
memset
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
malloc
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
_mbsnbcpy
_malloc_crt
memcpy
ceil
msvcp90
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
d3d9
Direct3DCreate9
Sections
_TEXT Size: 512B - Virtual size: 431B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE