U:\rel\hl2\src\utils\bugreporter\Release\bugreporter.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fabcce6f98128fbbbb88abf67d18303d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fabcce6f98128fbbbb88abf67d18303d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fabcce6f98128fbbbb88abf67d18303d_JaffaCakes118
-
Size
372KB
-
MD5
fabcce6f98128fbbbb88abf67d18303d
-
SHA1
e48e6a21cb571fddb6ff91cae5f00359038a4c3a
-
SHA256
ed40c79eb7d24e0dc41565981aca80110a7b87f66f4b415a70a9f74a012c05b4
-
SHA512
9caca623803e526950048c9ef35c84a1b2dc0c3166fe56643616fc823098c084602c2a00969926e8a043544e6f5ea72b46200514d9382f1a5da6207256a6d254
-
SSDEEP
6144:vZ/b8xKyoY75xtx5V77t+hzLw1I/u1tHxgIh5nQCrOOOkoR:db3BY75xth05U1Im3pHQCaOOfR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fabcce6f98128fbbbb88abf67d18303d_JaffaCakes118
Files
-
fabcce6f98128fbbbb88abf67d18303d_JaffaCakes118.dll windows:4 windows x86 arch:x86
eef6841f20ca71ae8bc5860d831e9882
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetPrivateProfileStringA
GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
CloseHandle
GetLocaleInfoW
FlushFileBuffers
ReadFile
GetTimeZoneInformation
SetConsoleCtrlHandler
SetStdHandle
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualAlloc
VirtualProtect
GetLocaleInfoA
SetFilePointer
InterlockedExchange
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
GetCPInfo
CompareStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetCurrentThreadId
GetCommandLineA
GetVersionExA
ExitProcess
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
RtlUnwind
TerminateProcess
GetCurrentProcess
FatalAppExitA
EnterCriticalSection
TlsAlloc
SetLastError
GetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
LCMapStringA
LCMapStringW
QueryPerformanceCounter
tier0
CommandLine_Tier0
?DevMsg@@YAXPBDZZ
DevMsg
?Lock@CThreadMutex@@QAEXXZ
?Lock@CThreadMutex@@QBEXXZ
_AssertValidReadPtr
_AssertValidWritePtr
Error
AssertValidStringPtr
g_pMemAlloc
Msg
trktooln
TrkHandleAlloc
TrkRecordHandleAlloc
TrkInitUserList
TrkGetNextUser
TrkGetUserFullName
TrkInitChoiceList
TrkGetNextChoice
TrkNewRecordBegin
TrkSetStringFieldValue
TrkSetDescriptionData
TrkNewRecordCommit
TrkGetNumericFieldValue
TrkGetSingleRecord
TrkUpdateRecordBegin
TrkUpdateRecordCommit
TrkProjectLogin
TrkGetLoginDBMSName
TrkGetLoginProjectName
TrkRecordHandleFree
TrkProjectLogout
TrkHandleFree
vstdlib
GetCVarIF
KeyValuesSystem
Exports
Exports
CreateInterface
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE