s:\toolbox\Toolbox\Plugins\BtToolboxPlugin\Release\HPQBts01.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5c149b446e5e67576ea093e64885704d_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
5c149b446e5e67576ea093e64885704d_JaffaCakes118
-
Size
458KB
-
MD5
5c149b446e5e67576ea093e64885704d
-
SHA1
688ba6406da2ba9655a614eab3152bb04f0e051d
-
SHA256
bb5dfba0f1c0b4b94d5e19be38ebe52b5969e8af1821d4121e1bbe29a878f0f0
-
SHA512
aa601beb9cf2f0381db60dc66932f65dccfbfc724da54fdfba99ad0b571d976d3a167acf825f2347a0674e95cf1b8e71900e6f593ff0e50248dbee67451d855e
-
SSDEEP
6144:ZPOKIMqaQA4kve2XCUxOkyCXRsa/FSp+Chf4pdSh80W9/OBl9:0KbpXCqOkxsa/FUhoEXWC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c149b446e5e67576ea093e64885704d_JaffaCakes118
Files
-
5c149b446e5e67576ea093e64885704d_JaffaCakes118.dll windows:5 windows x86 arch:x86
5c4b89644b6861f14a40492defb50c8d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
kernel32
RtlUnwind
GetCommandLineA
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
ExitProcess
HeapSize
GetACP
IsValidCodePage
GetStdHandle
LCMapStringA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GlobalFlags
InterlockedIncrement
GetModuleHandleW
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
SetLastError
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
lstrlenA
MultiByteToWideChar
FreeLibrary
WriteFile
ReadFile
DeviceIoControl
CloseHandle
CreateFileA
GetTickCount
GetVersionExA
Sleep
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetModuleHandleA
GetProcAddress
GetLastError
GlobalAlloc
GlobalFree
GetVersion
WaitForSingleObject
GetModuleFileNameA
LoadLibraryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
LCMapStringW
user32
EndPaint
BeginPaint
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
DestroyMenu
LoadCursorA
GetSysColorBrush
UnregisterClassA
GetWindowThreadProcessId
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
IsWindowEnabled
ShowWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
SendMessageA
EnableWindow
SetWindowLongA
GetWindowLongA
ReleaseDC
GetDC
MessageBoxA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetWindow
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
SendDlgItemMessageA
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
SetWindowPos
GetMenu
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
PtInRect
CopyRect
GetParent
gdi32
SetWindowExtEx
ScaleWindowExtEx
GetStockObject
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
SelectObject
DeleteDC
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
DeleteObject
CreateBitmap
GetObjectA
winspool.drv
ClosePrinter
GetPrinterDriverA
OpenPrinterA
EnumMonitorsA
EnumPrintersA
GetPrinterA
EnumPortsA
EnumJobsA
SetJobA
SetPrinterA
GetPrinterDataA
StartDocPrinterA
StartPagePrinter
WritePrinter
EndPagePrinter
EndDocPrinter
SetPrinterDataA
DocumentPropertiesA
advapi32
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
comctl32
CreatePropertySheetPageA
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
Exports
Exports
InitializeBtPlugin
TerminateBtPlugin
Sections
.text Size: 241KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ