bthci.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4115d4791373f59ceec8bde9d5a17ea1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4115d4791373f59ceec8bde9d5a17ea1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4115d4791373f59ceec8bde9d5a17ea1_JaffaCakes118
-
Size
76KB
-
MD5
4115d4791373f59ceec8bde9d5a17ea1
-
SHA1
ebce38c67878cb644fe28e03ba995efd6e797ea1
-
SHA256
7fd27bbed5f0173e6f4a860a8683c91f797e01539b793152ce3b2b974cf85a26
-
SHA512
ea072013d2dbd562a3393c890c0b2556e1d59a28ad96e949d22e56d29eb366d353253135e673e9b38459e466dead70714a5e8bfa19f66f81ea2b77cef023a68b
-
SSDEEP
1536:NBIvunNrbyWtNa2E1Alhbe+Q+oewHqHr4NDOxAvctS:RNCEc2E2hyuXwWrwrWS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4115d4791373f59ceec8bde9d5a17ea1_JaffaCakes118
Files
-
4115d4791373f59ceec8bde9d5a17ea1_JaffaCakes118.dll windows:5 windows x86 arch:x86
bbfc61016159b1f7118b96e7be017053
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_except_handler3
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
_vsnwprintf
ntdll
VerSetConditionMask
setupapi
SetupCloseLog
SetupLogErrorW
SetupDiInstallDevice
SetupDiCreateDevRegKeyW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiSetClassInstallParamsW
SetupDiGetClassInstallParamsW
SetupOpenLog
user32
EndDialog
GetDlgItem
GetWindowTextW
IsWindowEnabled
SetWindowTextW
LoadStringW
SendMessageW
EnableWindow
ShowWindow
DialogBoxParamW
SetWindowLongW
GetWindowLongW
GetParent
advapi32
StartServiceW
ChangeServiceConfigW
QueryServiceConfigW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetKeySecurity
RegCloseKey
RegQueryValueExW
RegSetValueExW
CreateServiceW
kernel32
GetTickCount
QueryPerformanceCounter
LoadLibraryExA
CompareStringW
GetCurrentThreadId
CreateFileW
CloseHandle
GetLastError
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
lstrcpynW
GetModuleFileNameW
LoadLibraryW
MultiByteToWideChar
DeviceIoControl
lstrlenW
DisableThreadLibraryCalls
LocalFree
GetComputerNameW
VerifyVersionInfoW
SetLastError
OutputDebugStringW
WideCharToMultiByte
lstrcmpiW
GetWindowsDirectoryW
LocalAlloc
Exports
Exports
BluetoothClassInstaller
DllMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ