asycfilt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b21d2ee932cc73048c80a348240b32ef_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
b21d2ee932cc73048c80a348240b32ef_JaffaCakes118
-
Size
127KB
-
MD5
b21d2ee932cc73048c80a348240b32ef
-
SHA1
36296e6d38db5e0b690452eaedcb8b1ec6a6cb8c
-
SHA256
15430bd8a601a299f958ea83e587f1310a8dc26c867434b79d210bf78e07ce9a
-
SHA512
ac1580b73d09aa21ee84b382e8abeb35196c049058f8d089dbec265a4be53ca44943d6062b50bd3fcd89cb7623fa7a49d0068decca609ada590a73bb42844b49
-
SSDEEP
3072:i9MyQf45hXDV5EWZHQZg/uxrmxG7MX4GEr9AEAlwnyhHP:i9MyPhXXEWZk9rmzXGahHP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b21d2ee932cc73048c80a348240b32ef_JaffaCakes118
Files
-
b21d2ee932cc73048c80a348240b32ef_JaffaCakes118.dll windows:5 windows x86 arch:x86
5deee9ef803f3882a12b5c1690dcfb3e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ole32
ReleaseStgMedium
user32
UnionRect
gdi32
SetStretchBltMode
GetObjectW
CreateSolidBrush
DeleteObject
PatBlt
SelectObject
SetDIBits
SelectPalette
SetDIBitsToDevice
StretchDIBits
GetCurrentObject
SetMapMode
GetNearestPaletteIndex
SetDIBColorTable
GetNearestColor
kernel32
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetUnhandledExceptionFilter
GetLastError
GlobalDeleteAtom
GlobalAddAtomA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
EnterCriticalSection
lstrlenA
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
msvcrt
exit
fprintf
_iob
_snprintf
sscanf
getenv
malloc
free
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
longjmp
_setjmp3
realloc
_except_handler3
_purecall
_initterm
_adjust_fdiv
Exports
Exports
DllCanUnloadNow
FilterCreateInstance
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE