custsat.pdb
Static task
static1
Behavioral task
behavioral1
Sample
184a4434ecfecb76b8f8f319fcde3824_JaffaCakes118.dll
Resource
win7-20231129-en
General
-
Target
184a4434ecfecb76b8f8f319fcde3824_JaffaCakes118
-
Size
132KB
-
MD5
184a4434ecfecb76b8f8f319fcde3824
-
SHA1
d5c47a25b2e24bf479f8a5e79c14c0c7a5f163d7
-
SHA256
2df1c8750ce45d46f70e2854ee6231af6e7ae2c8e33e5956de296cf16b840da5
-
SHA512
cd4bfaec28a317f4f428efe7e12837626810a91205a421ccea8b76e39aeadd3980f0ea3d30605b86e81e77bf8d60d8f2f3a4dc34a71bb2934f51dfaad18fcf38
-
SSDEEP
1536:S2o6nwzfqmUSa4Ndg+VCxAvf/PqhXnzyP5xC1VXfbJpeU4KyQ5G0OYvVko9:Po6nwLqrSa4I+VCOHHCRQU4S5GBWVL9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 184a4434ecfecb76b8f8f319fcde3824_JaffaCakes118
Files
-
184a4434ecfecb76b8f8f319fcde3824_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
43faca19a24ebb6f045ead2184d44df3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
??2@YAPAXI@Z
ceil
free
_except_handler3
??3@YAXPAX@Z
malloc
_adjust_fdiv
_initterm
realloc
shlwapi
SHStrDupW
wnsprintfA
StrCpyNW
SHGetValueW
SHSetValueW
PathFindFileNameW
wnsprintfW
PathFileExistsW
ole32
CreateStreamOnHGlobal
CreateBindCtx
StringFromGUID2
CoCreateGuid
oleaut32
SysAllocString
SysFreeString
kernel32
RaiseException
LocalAlloc
LocalReAlloc
GetSystemInfo
CreateEventA
CreateFileMappingA
InterlockedCompareExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetLastError
InterlockedExchange
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
CompareStringA
FreeLibrary
Sleep
FindClose
ResetEvent
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetFileSize
GlobalAlloc
ReadFile
GlobalFree
WriteFile
VirtualAlloc
WaitForSingleObject
EnterCriticalSection
SetEvent
LeaveCriticalSection
InterlockedIncrement
DisableThreadLibraryCalls
LoadLibraryA
IsBadWritePtr
IsBadCodePtr
IsBadReadPtr
GetVersionExA
LocalFree
GetLastError
GetSystemTimeAsFileTime
CloseHandle
SystemTimeToFileTime
GetCurrentProcess
CompareFileTime
UnmapViewOfFile
GetSystemTime
MapViewOfFile
GetTickCount
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE