bebunaz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3e6725c5da6572be0f0f911087aa981d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e6725c5da6572be0f0f911087aa981d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3e6725c5da6572be0f0f911087aa981d_JaffaCakes118
-
Size
336KB
-
MD5
3e6725c5da6572be0f0f911087aa981d
-
SHA1
d489455f49b0c651d3f4207bae0cc01083b66de7
-
SHA256
5e96a1457b6130b9b9c673c2eaf950f83430b9411a4725008ca97e8c03dcc766
-
SHA512
7cc465e5873a8080cae9a3602ef88dc15a3eaef5f765e15e721c34372fac1c052d548d97bff273a67c2d8730d88a84f2dcc7a740adf3fb536424a78b90eed9c8
-
SSDEEP
3072:uVjdnTPXOYbLyF9d6kFucrzP0R/KKnBAnL0ryxyvZcMO/6T4nIB5BAZll3:u/zVLqz6kPrgKYSnXAZcR/6TkINwlR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e6725c5da6572be0f0f911087aa981d_JaffaCakes118
Files
-
3e6725c5da6572be0f0f911087aa981d_JaffaCakes118.dll windows:4 windows x86 arch:x86
f7e1f549f7294835c95f24812c6c832c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
TerminateProcess
Beep
CreateEventA
DeleteCriticalSection
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
Sleep
UnhandledExceptionFilter
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
user32
ValidateRect
DestroyIcon
DefDlgProcA
ReplyMessage
EndPaint
EqualRect
EnumPropsA
GetClassInfoA
CharToOemA
ClientToScreen
CreateCursor
CreateIcon
IsClipboardFormatAvailable
ToAsciiEx
SetParent
DrawIcon
CharNextA
advapi32
CopySid
GetLengthSid
InitializeSid
Exports
Exports
eHOOrhGuT
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT3 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.INIT2 Size: 4KB - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ