c:\cbs\build\1130917583\in\cadi\Src\ctmbspi\Release\ctmbspi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2e0fee42fe80c71295228c5e78a713f5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e0fee42fe80c71295228c5e78a713f5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2e0fee42fe80c71295228c5e78a713f5_JaffaCakes118
-
Size
104KB
-
MD5
2e0fee42fe80c71295228c5e78a713f5
-
SHA1
c603f4b96136c8aab513ba68d889793c5390b19e
-
SHA256
1dd773784afbaedb36bb497a78fb4bb72396d0d7cb6ed547a0c33c3b5598c814
-
SHA512
ff50bf1679ef9682fe50cfe3ec2bbe5b0854bea426dd9655bcc717a31bd8b3525261cc80469893273f9ee71d954851ac19bc5161335553fcacf404e61742d8b4
-
SSDEEP
1536:LzSLXB/6nWYDja/nxJBmodYi63wOmW+UBEPevKf8nYmWMlca/U1j5nAqdc:LO9/6nWYDGMkJFI2PevpYmxlc2UQ+c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e0fee42fe80c71295228c5e78a713f5_JaffaCakes118
Files
-
2e0fee42fe80c71295228c5e78a713f5_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
b846c0f9f633349e8b69c8ad51a5f70c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrlenA
lstrcmpiA
OutputDebugStringA
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
CloseHandle
CreateFileA
GetProcAddress
LoadLibraryA
EnterCriticalSection
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
ReleaseMutex
WaitForSingleObject
FlushFileBuffers
SetStdHandle
SetFilePointer
GetOEMCP
GetStringTypeW
GetStringTypeA
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FlushInstructionCache
InterlockedExchange
GetCPInfo
IsBadCodePtr
IsBadReadPtr
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
HeapReAlloc
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
user32
wsprintfA
CharNextA
UnregisterClassA
UnregisterDeviceNotification
RegisterDeviceNotificationA
DestroyWindow
CallWindowProcA
GetWindowLongA
CreateWindowExA
RegisterClassExA
DefWindowProcA
LoadCursorA
GetClassInfoExA
SetWindowLongA
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
ole32
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
RegisterTypeLi
SysAllocString
VarUI4FromStr
SysFreeString
UnRegisterTypeLi
LoadTypeLi
shlwapi
PathFindExtensionA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ