C:\Builddll\Release\truckmaindll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e3d15d7a980ace6180366f8bf19486b4_JaffaCakes118.dll
Resource
win7-20240221-en
General
-
Target
e3d15d7a980ace6180366f8bf19486b4_JaffaCakes118
-
Size
401KB
-
MD5
e3d15d7a980ace6180366f8bf19486b4
-
SHA1
d80206ab57c0531fbd08304aae72ae4a59272a20
-
SHA256
f72de7977e741c12ab790ec01a3e7452de8fddac7b62a13750a0e72f7fe33175
-
SHA512
5bbf1105aa3591e0e0799830660d80808a7cfe73bc26251342534f903435489858bd3a14deacbf554882a9f1f5b6ec69057240da70d80ab2fbbdcd32b07592cd
-
SSDEEP
6144:SYbxqY1tkUnvIRKYdZEMiXeUJqFfEGTJ210yGCZ0AlBqhmkh3brRLeeuXkHlFWkq:jxqY1tzwRKYdiMiXvqFfX2St6VmASvl+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e3d15d7a980ace6180366f8bf19486b4_JaffaCakes118
Files
-
e3d15d7a980ace6180366f8bf19486b4_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
3da17812d53e4c8ea40facb22cec21c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CancelWaitableTimer
SetEvent
SizeofResource
CreateEventA
MulDiv
VirtualAlloc
WaitForSingleObject
CloseHandle
CreateWaitableTimerA
CreateThread
SetStdHandle
WriteConsoleW
SetWaitableTimer
LoadResource
lstrlenA
DeleteTimerQueueEx
FindResourceA
CreateTimerQueueTimer
CreateTimerQueue
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetModuleFileNameW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
LoadLibraryW
CreateFileW
user32
GetDC
gdi32
SelectObject
CreateCompatibleDC
RealizePalette
SelectPalette
GetObjectA
GetDeviceCaps
Exports
Exports
DllRegisterServer
GetGreed
NtDpi
Sections
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ