C:\Users\Shane\Desktop\luizimloko Simple - Sprite\Release\CA Base D3D Menu Selection.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1453716db4b28c3f59a6e212332b7b24_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1453716db4b28c3f59a6e212332b7b24_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
1453716db4b28c3f59a6e212332b7b24_JaffaCakes118
-
Size
14KB
-
MD5
1453716db4b28c3f59a6e212332b7b24
-
SHA1
12d51987a1c42dd0226febd2de1a1f96ac8bcf48
-
SHA256
85245ddecee14dff80a5c1cbfaf6c02437549fd12eb6d90bf6076a696f895ec7
-
SHA512
697f0dd91539168235fe14b69010fcd23e139d91cbcc1ac01e1fcc9999604310fe8d6016cd141f57df8f0dd2f4f90e96861354d45b28ad5f2b27a47ce1587783
-
SSDEEP
192:bcV4ZTSdyaVeisp/pwuDPCZw94D3UaNkGH669u3X3PGR6JIamsXHO:bcaZglubCZwyDkaqGH669ynPGamOO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1453716db4b28c3f59a6e212332b7b24_JaffaCakes118
Files
-
1453716db4b28c3f59a6e212332b7b24_JaffaCakes118.dll windows:5 windows x86 arch:x86
f6a3e7d71d1be12d1431929b8a4b18f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
Sleep
DisableThreadLibraryCalls
GetModuleHandleA
CreateThread
LoadLibraryA
VirtualProtect
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
user32
MessageBoxA
SetRect
GetAsyncKeyState
d3dx9_43
D3DXCreateSprite
D3DXCreateFontA
D3DXCreateTextureFromFileInMemoryEx
msvcr100
_initterm_e
_amsg_exit
_initterm
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_encoded_null
free
_malloc_crt
clock
malloc
__CppXcptFilter
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ