sbdrop.pdb
Static task
static1
Behavioral task
behavioral1
Sample
53c8301385f711ace2b3211b1250f438_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53c8301385f711ace2b3211b1250f438_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
53c8301385f711ace2b3211b1250f438_JaffaCakes118
-
Size
67KB
-
MD5
53c8301385f711ace2b3211b1250f438
-
SHA1
11d22e990eb9058088ed6025a4ed7f1ed05a8e9e
-
SHA256
a06f85dd9fcfc4ead2060f0c24b8ec936b01ec59e50f51c518bc6d359dde6628
-
SHA512
e357769e6b58b967451c97c618ddc3210f6bdc053005fcec4278aef6455e274872ed978d36d1b0db146bcac4144c168721f0b7d2ae6cc579ef59dabe2a298ed3
-
SSDEEP
1536:AD7lLKcTItEDe/rrWn+e+LG9ThLh7heyBT+9:AVKvY2rrsj9ThLh7heyBy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53c8301385f711ace2b3211b1250f438_JaffaCakes118
Files
-
53c8301385f711ace2b3211b1250f438_JaffaCakes118.dll regsvr32 windows:6 windows x86 arch:x86
4fae3be96ead47a01bcda9081fe59735
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
vmsvcrt
_purecall
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
_except_handler4_common
_vsnwprintf
memset
free
malloc
atl
ord18
ord32
ord15
ord22
ord21
ord16
ord23
vkernel32
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GlobalLock
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
GetTickCount
GetTempPathW
InterlockedIncrement
InterlockedDecrement
GlobalDeleteAtom
CloseHandle
GlobalUnlock
GetLastError
GlobalAddAtomW
CopyFileW
lstrlenW
CreateProcessW
DisableThreadLibraryCalls
vuser32
FindWindowW
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageW
GetWindowThreadProcessId
AllowSetForegroundWindow
SendMessageCallbackW
PeekMessageW
shlwapi
PathRemoveFileSpecW
PathCombineW
PathFindFileNameW
PathFileExistsW
ole32
ReleaseStgMedium
vshell32
DragQueryFileW
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 834B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.detour Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE