d:\Documents and Settings\User\Desktop\SFMenuBase\compilado\Menu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
65b981dc651c25d89a6ebf19f783451b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65b981dc651c25d89a6ebf19f783451b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
65b981dc651c25d89a6ebf19f783451b_JaffaCakes118
-
Size
264KB
-
MD5
65b981dc651c25d89a6ebf19f783451b
-
SHA1
41956e416d5d5038c350ed619cdc344d9a1c1c65
-
SHA256
45bf6922488189354fe23db9e87c47e01eb86f8a707344c1518f196952ecc8b1
-
SHA512
94b23959fe303b67a101870ca05b3b92e1606b8d0506810dfc545905484de209b8841be8a276eaed652cabae747b5b4367dcefa86579969d830c9cb30aa35f86
-
SSDEEP
6144:FKl9k9RUUhUYma8Dh1/y3fRjTQeeaQeenBQeesQeeMgQeehQeeHVAj3VxGvwJGMD:FK6hUYDcjSnAjyFhc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65b981dc651c25d89a6ebf19f783451b_JaffaCakes118
Files
-
65b981dc651c25d89a6ebf19f783451b_JaffaCakes118.dll windows:5 windows x86 arch:x86
20b386481a39800bf4fbd4a8fff0c639
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetModuleHandleA
CreateThread
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
FlushInstructionCache
VirtualProtect
SetLastError
InterlockedCompareExchange
InterlockedExchange
IsProcessorFeaturePresent
GetSystemInfo
OutputDebugStringA
GetProcAddress
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
Sleep
user32
GetAsyncKeyState
msvcr90
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
free
__CxxFrameHandler
_finite
_CIacos
iswspace
iswalpha
iswdigit
iswpunct
strncpy
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
memset
_vsnprintf_s
__clean_type_info_names_internal
gdi32
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
ExtTextOutW
MoveToEx
ExtTextOutA
CreateCompatibleDC
SetMapMode
SetTextAlign
CreateFontIndirectW
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
SetBkMode
SetBkColor
SetTextColor
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
DeleteObject
DeleteDC
CreateDIBSection
GetObjectA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ