bebunaz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
109027a9d2a7bf23e3c5f71993eb2a88_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
109027a9d2a7bf23e3c5f71993eb2a88_JaffaCakes118.dll
Resource
win10v2004-20240910-en
General
-
Target
109027a9d2a7bf23e3c5f71993eb2a88_JaffaCakes118
-
Size
262KB
-
MD5
109027a9d2a7bf23e3c5f71993eb2a88
-
SHA1
987f5fe9940b2df9b1a13e1019b4981038751d10
-
SHA256
0fc3cdc35c480960b143c9e7bb11ce70447a62f6d56364b5c2256f3b5140e9e4
-
SHA512
defd3fc591a2541c6ac816a967c4cbae0471fec1157579dbfe7018cff838e141d7d8f90d3e45ed12bc55f7ab4cefd9031a82a4ca06f88461e18dbde0dd676846
-
SSDEEP
3072:OEgg4A1Kmd7ogsIvcd4p0jqOR21yxyvZcMO/6T4nIB5BAZll:OEgjm9oWcip8AZcR/6TkINwl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 109027a9d2a7bf23e3c5f71993eb2a88_JaffaCakes118
Files
-
109027a9d2a7bf23e3c5f71993eb2a88_JaffaCakes118.dll windows:4 windows x86 arch:x86
237d987e6ffe1eaed53233b0de470616
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
SetUnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
Sleep
UnhandledExceptionFilter
GetCurrentThreadId
GetModuleHandleW
GetACP
user32
GetDlgCtrlID
GetClassLongW
FrameRect
FindWindowA
EndPaint
DrawMenuBar
DlgDirListA
DeleteMenu
CreateMDIWindowA
ChangeDisplaySettingsExA
ChangeDisplaySettingsA
ChangeClipboardChain
EnumClipboardFormats
GetDoubleClickTime
GetNextDlgGroupItem
GetScrollRange
GetCursorInfo
advapi32
ReadEventLogA
OpenEventLogA
CloseEventLog
Exports
Exports
ereehueyu
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT3 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.INIT2 Size: 4KB - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ