F:\repack\miniloader\build\release\obj\src\main\miniloader-patchdate-stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
56c25261a97e6c6b9c6bda880d9d14e8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
56c25261a97e6c6b9c6bda880d9d14e8_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
56c25261a97e6c6b9c6bda880d9d14e8_JaffaCakes118
-
Size
72KB
-
MD5
56c25261a97e6c6b9c6bda880d9d14e8
-
SHA1
b264327818b7bb7aad4ea787c50f85df677e25f9
-
SHA256
cab9406477d19c73c38b5b7bae6e12bffe71770472d42cc2b9aec40477547c6e
-
SHA512
c328a313cfba5e93be80cf4ba0fc0af2f03f56d3b4b53b95d7e72aa3ae394154a47ea04f9154e73f2e95793f9d1463f5a50102df3fdee86adb37510b0e8c5efa
-
SSDEEP
768:CqBdlb2Cn4uHsjSHZNTnKuwzhLxpaMzIk9UzGmCNO6jP9VsW18AfjjmpPg:3db2eHWM2uMLxUMF9UzyOUPV18Af8g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56c25261a97e6c6b9c6bda880d9d14e8_JaffaCakes118
Files
-
56c25261a97e6c6b9c6bda880d9d14e8_JaffaCakes118.dll windows:4 windows x86 arch:x86
30d67248742df645b9abce7b571bdd5d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
ExitProcess
SetEvent
OpenEventW
SetCurrentDirectoryW
GetSystemDirectoryW
SetLastError
ExpandEnvironmentStringsW
GetStartupInfoW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindFirstFileW
FindClose
GetLocalTime
CreateThread
DeviceIoControl
SetErrorMode
GetVolumeInformationW
GetDiskFreeSpaceW
GetCommandLineW
GetDriveTypeW
SetVolumeLabelW
GetEnvironmentVariableW
Sleep
CloseHandle
SetStdHandle
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetFilePointer
GetLastError
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
lstrcpyA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetVersion
GetCommandLineA
RtlUnwind
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
GetCurrentProcess
TerminateProcess
HeapFree
HeapAlloc
GetProcessHeap
Exports
Exports
arlu
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 526B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ