meqbloom1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
015f435e165ea15ad568398c739caa07_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
015f435e165ea15ad568398c739caa07_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
015f435e165ea15ad568398c739caa07_JaffaCakes118
-
Size
229KB
-
MD5
015f435e165ea15ad568398c739caa07
-
SHA1
770ed182e7f189a7265177437343e2a655b96cd9
-
SHA256
ec3489a9001569478c61047f3e60ccbc8612fe9789e2a5a7ccdf537bc68024db
-
SHA512
8af1babb5b943169e90426299275ea488425bfdf777ffbee67da4bd22a479fda652f70f3afec64a9ec0391af12142f51abfc84496ffa0352a8e6583bb54cccc5
-
SSDEEP
3072:Z8xbjX0rEunetuGHTTpJJi3csbYq+xIUi8JX3OpI:yxbGEuegGNKiq+Irw30I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 015f435e165ea15ad568398c739caa07_JaffaCakes118
Files
-
015f435e165ea15ad568398c739caa07_JaffaCakes118.dll windows:4 windows x86 arch:x86
095a65e4c466e198d1e6ffebe682c2c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
UnhandledExceptionFilter
IsValidLanguageGroup
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
user32
ReplyMessage
SetActiveWindow
SetCursor
SetFocus
SetWindowPos
MessageBeep
CharLowerA
OpenClipboard
RegisterClassA
MessageBoxA
IsZoomed
SetCapture
SetScrollInfo
BeginPaint
AnimateWindow
ChangeMenuA
CharPrevA
CharToOemA
CreateDesktopA
CloseDesktop
gdi32
CreateDIBitmap
CreateCompatibleDC
GetSystemPaletteEntries
GetNearestColor
GetObjectA
GetDeviceCaps
CreateDCA
GetRegionData
DeleteObject
GetRandomRgn
CreateRectRgn
GetDIBits
CreateCompatibleBitmap
GetDeviceGammaRamp
StretchBlt
SetStretchBltMode
BitBlt
DeleteDC
advapi32
SetFileSecurityA
OpenEventLogA
IsValidSid
SetThreadToken
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Exports
Exports
VeAdjustScreenHeight
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 1024B - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ