C:\Users\Isaack\Documents\Visual Studio 2008\Projects\Psykocheats\Release\Psykocheats.pdb
Static task
static1
Behavioral task
behavioral1
Sample
73c780259bd506da53a04eb9c6981cc8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
73c780259bd506da53a04eb9c6981cc8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
73c780259bd506da53a04eb9c6981cc8_JaffaCakes118
-
Size
19KB
-
MD5
73c780259bd506da53a04eb9c6981cc8
-
SHA1
3e84cd563647a889cfce4bd26a2df0b408bea1ac
-
SHA256
b3e954d89c4d96b2c0fd2cbfba7d7f8a4d4f95cbace2a00f3907d82a3613ec1a
-
SHA512
3f3a2b3a52cd4e19e145e3102f02c33311e34268f51f727b8d190f035fa68a4ffccb82a54295143f10a2ec37c72e45041880c24ccaec1b6467574bfb51f8cb80
-
SSDEEP
384:FY4shPgerxAQhMOyH/b1njBD9lua/+e0:nsPlxAQhMOyH/1lBIYO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73c780259bd506da53a04eb9c6981cc8_JaffaCakes118
Files
-
73c780259bd506da53a04eb9c6981cc8_JaffaCakes118.dll windows:5 windows x86 arch:x86
5d496a71c309a7b2003368fe3302db07
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
Sleep
DisableThreadLibraryCalls
GetModuleHandleA
CreateThread
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
user32
GetMessageW
TranslateMessage
IsDialogMessageW
ShowWindow
IsDlgButtonChecked
CreateDialogParamW
DispatchMessageW
msvcr90
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_encoded_null
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
free
_malloc_crt
_encode_pointer
_adjust_fdiv
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ