e:\src\producersdk_rn\plugins\transform\videonoisefilter\videonoisefilter.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b4bb8f08e48c4f1e436db3737427a6f6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4bb8f08e48c4f1e436db3737427a6f6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b4bb8f08e48c4f1e436db3737427a6f6_JaffaCakes118
-
Size
96KB
-
MD5
b4bb8f08e48c4f1e436db3737427a6f6
-
SHA1
2c4df356cacf29ef657821d8827e412ebf979eaa
-
SHA256
eb292e4ce2850336952f26f7bf65e674266716548fe5ed43fe69c36fc1406462
-
SHA512
0e663aee34515bc804d80588f75d7826ed05aa9387307b2c34c674c9cf4b01e7e9bd476a3b36f293816b4a917c0c538e8c7c26548c805d568211a29f52e0058c
-
SSDEEP
1536:AHFE4bnwHzFQknjRjprmBNlDNG70eVAz2jLHq1NC9oaY7EWa:8LbQJRJ8v0700Hw7Pa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4bb8f08e48c4f1e436db3737427a6f6_JaffaCakes118
Files
-
b4bb8f08e48c4f1e436db3737427a6f6_JaffaCakes118.dll windows:4 windows x86 arch:x86
bc20ac19003a9988aa3e660b2586c796
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CreateMutexA
CloseHandle
WaitForSingleObject
ReleaseMutex
FreeLibrary
SetErrorMode
LoadLibraryA
DisableThreadLibraryCalls
GetProcAddress
msvcr71
isupper
strncpy
tolower
_onexit
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
__dllonexit
_stricmp
_putenv
strchr
sprintf
Exports
Exports
RMACreateInstance
RMAShutdown
SetDLLAccessPath
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
MMXCODE1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ