e:\bismillah\Release\PointBlank.pdb
Static task
static1
Behavioral task
behavioral1
Sample
72b1b68d20fd3d92630230255dbfffea_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
72b1b68d20fd3d92630230255dbfffea_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
72b1b68d20fd3d92630230255dbfffea_JaffaCakes118
-
Size
519KB
-
MD5
72b1b68d20fd3d92630230255dbfffea
-
SHA1
c71ea2f3acea3850bcd3e4d1a4cc508d361c492f
-
SHA256
438031721691d57462690b6565d84397b0382d5d86fe13d6283eb53475be176c
-
SHA512
fd4a1eac2cc8e08e047c6a55f78796d1e033f58f7bf4ea897f2a16bc3752a7768ab261be70a9f4982de3cebd59a93114b68491b1da913f31af7e5855c391fc48
-
SSDEEP
6144:NOdn/v73znkUYFYQ/OxjN8BfEojaQeeaQeepQeesQee2jQeehQeezLwuZiCkVsws:NI/v7jkUYFYqOt+N1wrNMyOP3XpVoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72b1b68d20fd3d92630230255dbfffea_JaffaCakes118
Files
-
72b1b68d20fd3d92630230255dbfffea_JaffaCakes118.dll windows:5 windows x86 arch:x86
c678e32a451cfabb2dbc3bd9cc07660f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
MultiByteToWideChar
CreateThread
VirtualProtect
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
DisableThreadLibraryCalls
VirtualAlloc
IsBadWritePtr
MulDiv
Beep
Sleep
IsBadReadPtr
GetCurrentProcess
ExitProcess
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
GetSystemInfo
OutputDebugStringA
VirtualFree
GetProcAddress
WideCharToMultiByte
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
user32
DefWindowProcA
ReleaseDC
MessageBoxA
GetForegroundWindow
GetDesktopWindow
RegisterClassExA
DestroyWindow
GetSystemMetrics
mouse_event
GetDC
GetAsyncKeyState
CreateWindowExA
gdi32
DeleteDC
CreateDIBSection
CreateFontA
GetDeviceCaps
SetBkColor
DeleteObject
SetTextColor
CreateCompatibleDC
SetMapMode
SetTextAlign
GetPixel
ExtTextOutA
GetObjectW
GetTextMetricsA
GetTextExtentPoint32A
SelectObject
CreateFontIndirectA
ExtTextOutW
MoveToEx
CreateFontIndirectW
GetObjectA
GetFontLanguageInfo
GetTextMetricsW
SetBkMode
GetCharacterPlacementW
GetCharacterPlacementA
GetGlyphOutlineA
shell32
ShellExecuteA
d3d9
Direct3DCreate9
msvcr90
__CxxFrameHandler3
_CIsqrt
memset
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
strcpy_s
??2@YAPAXI@Z
_time64
_localtime64
??3@YAXPAX@Z
system
malloc
free
ceil
_mbsnbcpy
vsprintf
sprintf
tmpfile
fclose
fwrite
fseek
fread
_CIpow
_ftol
strncpy
_CIacos
_finite
iswpunct
iswdigit
iswalpha
iswspace
modf
longjmp
_setjmp3
isdigit
isspace
sscanf
ldexp
_strdup
setlocale
floor
__CxxFrameHandler
exit
wininet
InternetOpenA
InternetOpenUrlA
InternetReadFile
winmm
timeGetTime
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
Sections
.text Size: 319KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ