c:\build\source\pnrscmgr\rel32\pnrscmgr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
76db0355d822d10351f237c687e9581f_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
76db0355d822d10351f237c687e9581f_JaffaCakes118
-
Size
115KB
-
MD5
76db0355d822d10351f237c687e9581f
-
SHA1
fe83933abeb2dc173d2b08816868069c5280fad4
-
SHA256
87b0777c4f738a7c1474566d70f162d607c46e174382c04a24bbde68019382f1
-
SHA512
56740d2ccdda8645fc305970ba0a4bb25e9b1c844eeb303e4645853c5d57383a682f3d9800f296a0ebc031c6145449ce0709c8896d7e1f5a57c95d1add948378
-
SSDEEP
3072:Af0O1PnsRXBe34pkMQIMx0msZ5WKSrFsv2r93Y2P:AsO1PsQqkM8HZsuB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76db0355d822d10351f237c687e9581f_JaffaCakes118
Files
-
76db0355d822d10351f237c687e9581f_JaffaCakes118.dll windows:5 windows x86 arch:x86
d9bf66823fd0c9a9b6475c0f15322c90
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
LoadLibraryA
LockResource
LoadResource
GetProcAddress
InterlockedDecrement
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
user32
CreatePopupMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
AppendMenuA
LoadMenuIndirectA
LoadImageA
LoadStringA
LoadCursorA
LoadIconA
LoadBitmapA
msvcr90
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
free
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
Exports
Exports
PNCreateInstance
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ