macriuem.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c96e32defba929f8aa1ad33898227617_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c96e32defba929f8aa1ad33898227617_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c96e32defba929f8aa1ad33898227617_JaffaCakes118
-
Size
67KB
-
MD5
c96e32defba929f8aa1ad33898227617
-
SHA1
66c143e881295b581b96e7f7d205e220b25c0024
-
SHA256
0a7c56060dfde3cfe1b39402e74f58569ae5abe48172319f088f12d356abcbd6
-
SHA512
ac8000003a302d641f0f4f5662be78e532ad614ef86a7f50f827b7f062ef88b2344ca82043f06928f750ee8be06eaf84e438aa4ce5b10973314d0ff6d52de350
-
SSDEEP
1536:n4cJCm7ktzCYzt7lDxVDLKzZj93PMqSMvZ6H7iOBS:4e7Szfzt7zVnKzZj9UqSMvZ07i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c96e32defba929f8aa1ad33898227617_JaffaCakes118
Files
-
c96e32defba929f8aa1ad33898227617_JaffaCakes118.dll windows:4 windows x86 arch:x86
994f61f0e7f3f826bca28c1cf77b2a82
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
Sleep
GetModuleHandleW
GetModuleHandleA
GetProcAddress
GetLastError
OpenProcess
CreateRemoteThread
GetCurrentProcess
SetUnhandledExceptionFilter
CloseHandle
UnhandledExceptionFilter
user32
CheckMenuItem
advapi32
AdjustTokenPrivileges
OpenProcessToken
Exports
Exports
cxqqdx
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 514B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ