o:\OOO320\src\bean\wntmsci12.pro\bin\officebean.pdb
Static task
static1
Behavioral task
behavioral1
Sample
89d272c4c3b54c88af768a0427c87d54_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
89d272c4c3b54c88af768a0427c87d54_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
89d272c4c3b54c88af768a0427c87d54_JaffaCakes118
-
Size
9KB
-
MD5
89d272c4c3b54c88af768a0427c87d54
-
SHA1
85a3dd8ace5fb6a2aa104ab48b175607c3cd4a5f
-
SHA256
09457648f60f384349a87d87ec07e657c0ff86b9d5ac0d6176cd51fc5373045b
-
SHA512
4e755be7d7a7bd9016b44d6cb43a6049a5df2eeb8cb1c8541bbd3a9d3410bcd755f4d3376b01731365f125d843d2b7fcd9c96e36af5ba90164b99de45920949a
-
SSDEEP
192:Y/O+UbiytTQ+g+prqr93XJOZ4ZrhN6HZ:K4OyJQF+IrBZOENy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89d272c4c3b54c88af768a0427c87d54_JaffaCakes118
Files
-
89d272c4c3b54c88af768a0427c87d54_JaffaCakes118.dll windows:5 windows x86 arch:x86
c0840562f837ea776dcf4d1d535d71ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcr90
_except_handler4_common
_onexit
_crt_debugger_hook
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_encode_pointer
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
kernel32
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
jawt
_JAWT_GetAWT@8
uwinapi
SetPropA
GetPropA
CallWindowProcA
SetWindowLongA
user32
SetWindowPos
GetClientRect
GetWindow
Exports
Exports
GetVersionInfo
Java_com_sun_star_beans_LocalOfficeWindow_getNativeWindow
Java_com_sun_star_beans_LocalOfficeWindow_getNativeWindowSystemType
Java_com_sun_star_comp_beans_LocalOfficeWindow_getNativeWindow
Java_com_sun_star_comp_beans_LocalOfficeWindow_getNativeWindowSystemType
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 422B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ