C:\Users\Francesco\Desktop\Chams\Base D3D9 With Chams\Base D3D9\Release\Base D3D9.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8670a11f4f98a782ecc7969553b36dc5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8670a11f4f98a782ecc7969553b36dc5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8670a11f4f98a782ecc7969553b36dc5_JaffaCakes118
-
Size
1.4MB
-
MD5
8670a11f4f98a782ecc7969553b36dc5
-
SHA1
c1e55098abdc97060db29bf1d4da56865b2d80d1
-
SHA256
7fe1eb60c20df6b1500ba91abc2c572749f8587fefc9e29314cb73955628994f
-
SHA512
8c6cc9133415061011852bb5cb2847dccfbd4eb3964c850d848f84dc922da9cd9737631f1f43f824bab41c624a6789cb99f49e04624318ea4f9c444bcc2d72a2
-
SSDEEP
24576:Jr+SdL9X26P9sGWGkmrndOWPGZuVaSTf1UtA9RgWgHH+ovsaS/6O0prh:PjWnWE5yacD9PgnvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8670a11f4f98a782ecc7969553b36dc5_JaffaCakes118
Files
-
8670a11f4f98a782ecc7969553b36dc5_JaffaCakes118.dll windows:5 windows x86 arch:x86
9d153523b1b92000c99a25f35710515e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CreateFileA
CreateFileW
CloseHandle
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
EnterCriticalSection
InterlockedExchange
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
LeaveCriticalSection
GetFullPathNameA
lstrcmpiA
HeapAlloc
GetProcessHeap
HeapFree
GetSystemTimeAsFileTime
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetLocalTime
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
IsDebuggerPresent
RaiseException
DebugBreak
lstrlenA
HeapValidate
IsBadReadPtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
FatalAppExitA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
CreateFileMappingA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
SetConsoleCtrlHandler
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
VirtualQuery
FreeLibrary
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
GetFileAttributesA
HeapSize
HeapReAlloc
WriteConsoleW
OutputDebugStringW
LoadLibraryW
GetTimeZoneInformation
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileSize
MapViewOfFile
GetLastError
WriteFile
IsProcessorFeaturePresent
GetSystemInfo
OutputDebugStringA
VirtualFree
GetProcAddress
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
CreateThread
GetModuleHandleA
Sleep
ExitProcess
VirtualAlloc
GetCurrentThread
VirtualProtect
user32
GetSystemMetrics
GetAsyncKeyState
SetRect
MessageBoxA
shell32
ShellExecuteA
gdi32
CreateFontIndirectW
GetTextMetricsW
SetTextAlign
SetMapMode
GetFontLanguageInfo
CreateFontIndirectA
ExtTextOutW
MoveToEx
ExtTextOutA
SetBkMode
SetBkColor
SetTextColor
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
DeleteObject
DeleteDC
CreateDIBSection
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
GetObjectA
CreateCompatibleDC
advapi32
RegQueryValueExA
RegOpenKeyA
RegCloseKey
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ