c:\Users\tony\Desktop\Tous les dossiés et bloc note\C++\N4n033 Base\Release\N4n033 VIP Base.pdb
Static task
static1
Behavioral task
behavioral1
Sample
47044fd784b36e71c7b2ae4e4ac59f6f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47044fd784b36e71c7b2ae4e4ac59f6f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
47044fd784b36e71c7b2ae4e4ac59f6f_JaffaCakes118
-
Size
251KB
-
MD5
47044fd784b36e71c7b2ae4e4ac59f6f
-
SHA1
5623551bdfb8b54a681a1c2a2a47f10d07c53bc2
-
SHA256
b7db9419f0f94c69a027c02ea022d6edf44c5787084129cfa36e98b718fbe5ab
-
SHA512
ecad148afb5503884132c45bd3168317bb2af21dc21210f115e8301fa281465e526bd4e809c0847dcab5510245f8fc4c62da6e0f0f8eb5a15618bdd175a1ab73
-
SSDEEP
6144:M/b5UYo4fSaD/mnKf5FQeeaQeehQeesQeemaQeehQeeGnQgV0hfyjMYs:m5UYfKKGXQBfA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47044fd784b36e71c7b2ae4e4ac59f6f_JaffaCakes118
Files
-
47044fd784b36e71c7b2ae4e4ac59f6f_JaffaCakes118.dll windows:5 windows x86 arch:x86
210097a4d037ecd97ee2cbf46398f1a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CreateThread
VirtualProtect
GetModuleHandleA
LoadLibraryA
VirtualProtectEx
VirtualAlloc
Sleep
GetCurrentProcess
ExitProcess
IsProcessorFeaturePresent
GetSystemInfo
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
OutputDebugStringA
user32
GetSystemMetrics
GetAsyncKeyState
GetCursorPos
SetRect
GetForegroundWindow
ScreenToClient
gdi32
SetTextColor
DeleteDC
CreateDIBSection
GetGlyphOutlineA
SetBkColor
DeleteObject
SelectObject
CreateCompatibleDC
GetTextMetricsA
GetObjectW
GetFontLanguageInfo
ExtTextOutW
MoveToEx
CreateFontIndirectW
CreateFontIndirectA
GetObjectA
GetTextMetricsW
SetBkMode
GetCharacterPlacementW
GetCharacterPlacementA
ExtTextOutA
SetTextAlign
SetMapMode
msvcr90
iswdigit
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
strncpy
free
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
??_U@YAPAXI@Z
_ftol
iswpunct
iswalpha
iswspace
_CIacos
_finite
__CxxFrameHandler
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
Sections
_TEXT Size: 512B - Virtual size: 431B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ