asycfilt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
47678fc44493c52bc4fd6201a4a04a25_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47678fc44493c52bc4fd6201a4a04a25_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
47678fc44493c52bc4fd6201a4a04a25_JaffaCakes118
-
Size
64KB
-
MD5
47678fc44493c52bc4fd6201a4a04a25
-
SHA1
71fd13d556ff1d9481260198a95b09abc27a1ab2
-
SHA256
ddd92a0096b6c17588b762d9ec091751e3c1ea898843fc1c7543135e06e2bdd2
-
SHA512
5097bfae9b6ca8dc082a6142d8fbd325024dbcc5bb2d6f9dff2181ea54590d1776b4ec1a418eee020a9e3004f574cedff72c38c2f8fe1f6d5785092d4ce432fd
-
SSDEEP
1536:t+l9qzWcgHubVZikHcqw8fdShGMMT5Elp0wnR/cHfupJy+h:29qzlbO4nChGMk5EP0wC/upM+h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47678fc44493c52bc4fd6201a4a04a25_JaffaCakes118
Files
-
47678fc44493c52bc4fd6201a4a04a25_JaffaCakes118.dll windows:5 windows x86 arch:x86
5deee9ef803f3882a12b5c1690dcfb3e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ole32
ReleaseStgMedium
user32
UnionRect
gdi32
SetStretchBltMode
GetObjectW
CreateSolidBrush
DeleteObject
PatBlt
SelectObject
SetDIBits
SelectPalette
SetDIBitsToDevice
StretchDIBits
GetCurrentObject
SetMapMode
GetNearestPaletteIndex
SetDIBColorTable
GetNearestColor
kernel32
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetUnhandledExceptionFilter
GetLastError
GlobalDeleteAtom
GlobalAddAtomA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
EnterCriticalSection
lstrlenA
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
msvcrt
exit
fprintf
_iob
_snprintf
sscanf
getenv
malloc
free
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
longjmp
_setjmp3
realloc
_except_handler3
_purecall
_initterm
_adjust_fdiv
Exports
Exports
DllCanUnloadNow
FilterCreateInstance
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ