winampGetMediaLibraryPlugin
Static task
static1
Behavioral task
behavioral1
Sample
2629ca6307a960468f766a06baf96b66_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2629ca6307a960468f766a06baf96b66_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2629ca6307a960468f766a06baf96b66_JaffaCakes118
-
Size
47KB
-
MD5
2629ca6307a960468f766a06baf96b66
-
SHA1
c8725bc112d3103aa66e064f6765d49e8668d63b
-
SHA256
cd32cbdf8e786f9b6912df7c39c8efda76ab38c4da79dac9288d526e678897c0
-
SHA512
aaf2fe4f691e6fe63b3d7a69c731e068063227d8f3db69f35f6341dc3968ea1a241a4a98c07913b8ddf7d94873136430b193d91dd0231badf24c361d8f897f5c
-
SSDEEP
768:aJAcDIWN9V1KuNJpV3+JlC75CeU3DXnBSJyStoTYFNMOKbY6a78KlwLfO1J:6RV1NZKw5fUzXBSPtoTuMOKU6a78KSaf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2629ca6307a960468f766a06baf96b66_JaffaCakes118
Files
-
2629ca6307a960468f766a06baf96b66_JaffaCakes118.dll windows:5 windows x86 arch:x86
f8111bf45a3435d7509affed7611dc05
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comctl32
ord17
shlwapi
PathCombineA
ord29
PathIsURLW
kernel32
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
CreateDirectoryA
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
GetShortPathNameW
WideCharToMultiByte
GetTimeFormatW
lstrlenW
GetDateFormatW
lstrcpynW
FindClose
FindFirstFileW
CloseHandle
WaitForSingleObject
CreateThread
UnhandledExceptionFilter
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
LoadLibraryA
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
LocalAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
Sleep
user32
EnableMenuItem
GetCursorPos
SetWindowLongA
SetCapture
IsWindowVisible
SetDlgItemTextA
SetFocus
GetCapture
ReleaseCapture
ClientToScreen
IsWindow
SetDlgItemTextW
PeekMessageA
GetWindowTextLengthA
GetWindowTextW
GetParent
InvalidateRect
GetDlgItemInt
SetDlgItemInt
EnableWindow
SetWindowLongW
DestroyWindow
GetAsyncKeyState
KillTimer
SetTimer
CallWindowProcA
CallWindowProcW
MapWindowPoints
GetSubMenu
DestroyMenu
SendMessageW
MessageBoxA
SendMessageA
PostMessageA
IsDlgButtonChecked
CharPrevW
GetDlgItem
CheckDlgButton
gdi32
DeleteObject
shell32
ShellExecuteW
oleaut32
SysAllocString
SystemTimeToVariantTime
VariantInit
msvcr90
??_U@YAPAXI@Z
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memcmp
_purecall
wcscpy
sprintf
_strdup
strlen
strcmp
memcpy
??_V@YAXPAX@Z
_vsnprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler3
memset
free
malloc
_wcsicmp
_wtoi
_wcsdup
_wcsnicmp
wcsstr
_time64
_vsnwprintf
_localtime64
wcscmp
wcslen
realloc
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ