c:\Users\Coccolo\Desktop\Hack Warrock\BASE UFFICIALE xD\Release\Base D3D9.pdb
Static task
static1
Behavioral task
behavioral1
Sample
700a465f15584664106166ffc13c22af_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
700a465f15584664106166ffc13c22af_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
700a465f15584664106166ffc13c22af_JaffaCakes118
-
Size
1.4MB
-
MD5
700a465f15584664106166ffc13c22af
-
SHA1
120ce675a72fa3fc190d20868fc83a081aa909f1
-
SHA256
4aa8c45f443d60cf4576079823b66fe1f2ad16258ba342199e8c3de38473c6e2
-
SHA512
5eeb5f72fcd88fa7095e2d3bfa141e825d4f3e64b97750a5960cc5f2c747caa50654789da87803af1f1d7fce2a5b2d162144c0d85f718e76956dffa8062192b3
-
SSDEEP
24576:HKlhC+SJcZd+TrK0A2QAqlnGje28ttS8J4GFEbBFOhupFU+X3tqm6inzTDQ:rxKGQ72d8HbFE3OhUXtnz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 700a465f15584664106166ffc13c22af_JaffaCakes118
Files
-
700a465f15584664106166ffc13c22af_JaffaCakes118.dll windows:5 windows x86 arch:x86
24aa95b1a912cb8f565e90c4db25b9cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CreateFileA
CreateFileW
CloseHandle
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
EnterCriticalSection
InterlockedExchange
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
LeaveCriticalSection
GetFullPathNameA
lstrcmpiA
HeapAlloc
GetProcessHeap
HeapFree
GetSystemTimeAsFileTime
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetLocalTime
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
IsDebuggerPresent
RaiseException
DebugBreak
lstrlenA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
FatalAppExitA
HeapValidate
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
CreateFileMappingA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
SetConsoleCtrlHandler
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
VirtualQuery
FreeLibrary
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
GetFileAttributesA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapSize
HeapReAlloc
GetTimeZoneInformation
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileSize
MapViewOfFile
GetLastError
WriteFile
IsProcessorFeaturePresent
GetSystemInfo
OutputDebugStringA
VirtualFree
GetProcAddress
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
CreateThread
GetModuleHandleA
Sleep
ExitProcess
VirtualAlloc
GetCurrentThread
VirtualProtect
user32
MessageBoxA
GetSystemMetrics
GetAsyncKeyState
SetRect
winmm
sndPlaySoundA
gdi32
CreateFontIndirectW
GetTextMetricsW
SetTextAlign
SetMapMode
GetFontLanguageInfo
CreateFontIndirectA
ExtTextOutW
MoveToEx
ExtTextOutA
SetBkMode
SetBkColor
SetTextColor
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
DeleteObject
DeleteDC
CreateDIBSection
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
GetObjectA
CreateCompatibleDC
advapi32
RegQueryValueExA
RegOpenKeyA
RegCloseKey
Sections
.text Size: 1.2MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ