c:\prog\dosbox\src\libs\zmbv\Release\zmbv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e1ba31fc4a804c165a67212e6fc684eb_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
e1ba31fc4a804c165a67212e6fc684eb_JaffaCakes118
-
Size
244KB
-
MD5
e1ba31fc4a804c165a67212e6fc684eb
-
SHA1
e044e84d4ce75248037ab027594c0f657bb3a572
-
SHA256
2d404fd7f0cfc1c7d1ec1b81737c0041be50210f214ee2db23be2d25ec25a90e
-
SHA512
6212b300265dad78938248a357950bae6b3be3790250491e01fdd4976f44bb7fbca2fe1080840c74b2de43103fa6c93a04ddafacad6e10acf6d06ff940ab00a0
-
SSDEEP
6144:nGzKzlPCtTBrhQo30YVFTAiiNi/tb1PGk0zAa3X:nGMPCtT0Izmvyd1Ok0zAan
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1ba31fc4a804c165a67212e6fc684eb_JaffaCakes118
Files
-
e1ba31fc4a804c165a67212e6fc684eb_JaffaCakes118.dll windows:4 windows x86 arch:x86
1f4d7b24db9783b8109582ce83bb2f9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
winmm
DefDriverProc
kernel32
GetStartupInfoA
VirtualProtect
GetStdHandle
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
ExitProcess
RtlUnwind
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetSystemInfo
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
user32
DialogBoxParamA
EndDialog
shell32
ShellExecuteA
Exports
Exports
DriverProc
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE