I:\VS70Builds\3077\vsbuilt\retail\Bin\i386\opt\vspkgs\msats10.pdb
Static task
static1
Behavioral task
behavioral1
Sample
936ed168dd40f5e36ce00b46b6c5067b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
936ed168dd40f5e36ce00b46b6c5067b_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
936ed168dd40f5e36ce00b46b6c5067b_JaffaCakes118
-
Size
760KB
-
MD5
936ed168dd40f5e36ce00b46b6c5067b
-
SHA1
d02a3789231b1cf395b4d5dd68c0f89f2f6b6637
-
SHA256
0f04c9c9b955769fb56933554f5060c13ce2f9581ea8b21e41679469ad6f0516
-
SHA512
9f68a0d33b3aaca56e0787c327f1fa82390699f0b312b6e6f1b9fb0a93527ad8aef46cf048b464c66f666dc6244b1daa23f0e62fd700d7061062bb1cccea4a2d
-
SSDEEP
12288:Wm3xJAjS0FZhm1wRhQ2m2U+mb8e87RVZ7nUr2JVQbAmU7Tg6n+t:WmPAjS0Dh0ShpUpbTQrZ7nUrE+bAmU7t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 936ed168dd40f5e36ce00b46b6c5067b_JaffaCakes118
Files
-
936ed168dd40f5e36ce00b46b6c5067b_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
220ff859df82e5919e1b4c4acd920dca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
comctl32
ImageList_Destroy
ImageList_GetIcon
kernel32
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
GetLastError
DisableThreadLibraryCalls
InterlockedIncrement
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceExW
lstrlenA
WideCharToMultiByte
FreeLibrary
GetSystemDefaultLCID
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
SetLastError
GetProcAddress
CloseHandle
GlobalUnlock
GlobalLock
FindClose
SetFileTime
SystemTimeToFileTime
GetSystemTime
Sleep
TerminateThread
WaitForSingleObject
SetEvent
ResetEvent
DeleteCriticalSection
CreateThread
GetCurrentProcessId
WriteFile
UnmapViewOfFile
MapViewOfFile
GetFileSize
CompareFileTime
GlobalSize
GetTickCount
LocalFree
GlobalAlloc
GlobalFree
GlobalReAlloc
FlushFileBuffers
ReadFile
SetFilePointer
SetEndOfFile
GetFileType
HeapReAlloc
HeapSize
GetVersionExA
LoadLibraryExA
LocalAlloc
LoadLibraryA
HeapDestroy
GetSystemTimeAsFileTime
QueryPerformanceCounter
ExitProcess
OutputDebugStringA
InterlockedExchange
GetACP
InitializeCriticalSection
GetLocaleInfoA
RaiseException
GetThreadLocale
SetThreadPriority
user32
SetFocus
SetCursor
MsgWaitForMultipleObjects
SetWindowPos
GetWindowRect
GetDlgItem
GetActiveWindow
MapWindowPoints
GetClientRect
GetWindow
GetParent
GetCursorPos
IsWindowEnabled
IsClipboardFormatAvailable
DestroyWindow
EndDialog
TranslateMessage
DestroyIcon
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
oleaut32
SafeArrayCreate
SysFreeString
SysStringLen
VariantClear
VariantInit
VariantChangeType
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
SysAllocStringLen
CreateTypeLib2
SysAllocStringByteLen
SysStringByteLen
SafeArrayDestroy
SafeArrayPutElement
VariantCopy
VarUI4FromStr
VarCmp
LoadRegTypeLi
GetErrorInfo
VarBstrCmp
VarBstrCat
SetErrorInfo
ole32
CreateDataAdviseHolder
OleDuplicateData
OleGetClipboard
ReleaseStgMedium
CoInitializeEx
CoUninitialize
OleSetClipboard
CLSIDFromString
CreateBindCtx
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
StringFromCLSID
CoTaskMemRealloc
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
IIDFromString
CoCreateInstance
StringFromGUID2
shlwapi
PathFindExtensionW
PathRelativePathToW
urlmon
CreateURLMoniker
wininet
InternetCanonicalizeUrlW
mpr
WNetGetUniversalNameW
WNetGetUniversalNameA
msvcr71
wcsncat
strncpy
_initterm
_adjust_fdiv
__CppXcptFilter
__security_error_handler
?terminate@@YAXXZ
_onexit
_wgetenv
qsort
_wcsupr
_wcsicmp
_wcslwr
strstr
_wtof
_wtol
wcstok
memset
_wtoi
wcspbrk
__RTDynamicCast
_wcsrev
wcscspn
wcsspn
iswspace
_ltow
wcsncmp
wcscmp
_osplatform
_wsplitpath
wcschr
wcsstr
vswprintf
_vscwprintf
_itow
wcscat
realloc
_wcsnicmp
??_U@YAPAXI@Z
_resetstkoflw
malloc
mbstowcs
wcsrchr
wcscpy
wcsncpy
_purecall
??2@YAPAXI@Z
memmove
wcslen
_CxxThrowException
__CxxFrameHandler
??_V@YAXPAX@Z
??3@YAXPAX@Z
free
_except_handler3
??1type_info@@UAE@XZ
__dllonexit
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Sections
.text Size: 612KB - Virtual size: 611KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ