C:\Users\Di Martino\Desktop\Eagl3 Base\Release\Eagl3 Public.pdb
Static task
static1
Behavioral task
behavioral1
Sample
72126c96261866a1d53facf6a38792d0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
72126c96261866a1d53facf6a38792d0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
72126c96261866a1d53facf6a38792d0_JaffaCakes118
-
Size
1.4MB
-
MD5
72126c96261866a1d53facf6a38792d0
-
SHA1
d82eeca8e3e465e1ac9030144be8a5205ba3a96b
-
SHA256
bcc6275ff9930190f4bf0124475aa8253f5f54a77c48ec860d5ed9af7169bf6b
-
SHA512
bcea8097d3ceb1cb1616828766d2d9b5bc2c8aa54815de269c34c704656877f712f7c8644f93b7f4fe42da7f10c0d541165eae3f37a68fa58a7ecb139a189282
-
SSDEEP
24576:ydJ0LUpMrhKlKcbdylhsMjH99qjMuoKIL5tRQi6IPcahBUZ6XdDvgqK:YkcbEhsiCwuT4wIkahP3K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72126c96261866a1d53facf6a38792d0_JaffaCakes118
Files
-
72126c96261866a1d53facf6a38792d0_JaffaCakes118.dll windows:5 windows x86 arch:x86
355957d2a59567acedcad68fef80a6be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CloseHandle
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
EnterCriticalSection
InterlockedExchange
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
LeaveCriticalSection
GetFullPathNameA
lstrcmpiA
HeapAlloc
GetProcessHeap
HeapFree
IsDebuggerPresent
RaiseException
lstrlenA
LoadLibraryW
GetSystemTimeAsFileTime
RtlUnwind
GetCurrentThreadId
DecodePointer
GetCommandLineA
GetLocalTime
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EncodePointer
GetModuleFileNameW
VirtualQuery
FreeLibrary
GetTimeZoneInformation
HeapValidate
CreateFileW
InitializeCriticalSectionAndSpinCount
FatalAppExitA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
GetStringTypeW
SetConsoleCtrlHandler
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
LCMapStringW
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
GetFileAttributesA
WriteConsoleW
OutputDebugStringW
HeapReAlloc
HeapSize
HeapQueryInformation
SetStdHandle
FlushFileBuffers
SetEndOfFile
CompareStringW
SetEnvironmentVariableA
CreateFileA
CreateFileMappingA
GetFileSize
MapViewOfFile
GetLastError
WriteFile
IsProcessorFeaturePresent
GetSystemInfo
OutputDebugStringA
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
CreateThread
GetModuleHandleA
VirtualProtect
Sleep
IsBadReadPtr
ExitProcess
user32
keybd_event
GetAsyncKeyState
SetRect
MessageBoxA
gdi32
CreateFontIndirectW
CreateCompatibleDC
ExtTextOutA
SetTextAlign
SetMapMode
ExtTextOutW
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
SetBkMode
SetBkColor
SetTextColor
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
DeleteObject
DeleteDC
CreateDIBSection
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
GetObjectA
MoveToEx
advapi32
RegQueryValueExA
RegOpenKeyA
RegCloseKey
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ