d:\e\1273\Build\pdb\Release\LXRKWR10.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2d13a90714e99dafde5e1043efee607c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d13a90714e99dafde5e1043efee607c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2d13a90714e99dafde5e1043efee607c_JaffaCakes118
-
Size
192KB
-
MD5
2d13a90714e99dafde5e1043efee607c
-
SHA1
7d0d81e4241719bb0f624eb16591fc60d171f5b3
-
SHA256
c5c79121bcce79c8fc0a1902b59f1a525dd046c29922509f181b785993834a3b
-
SHA512
b68dcb40338774bc4448564ba6750f3b7f44d0bf4e5e471fc2d8e457eb892841795107f08d1dc8ed8929100e632f680c2581ddcb015b0a3900bfb980505c9afc
-
SSDEEP
3072:zlmz+UvTl4IIKr8HBmYr74bwTtaoAa/oOgoD4cjAsD17pZVEUpA++56QRXa:zeraFE+tCOgUnvR+J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d13a90714e99dafde5e1043efee607c_JaffaCakes118
Files
-
2d13a90714e99dafde5e1043efee607c_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
f7794f04e6f9bd2756a3f069f8304064
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
lxcurr12vc8
??0CLexCurrency@@QAE@XZ
??4CLexCurrency@@QAEABV0@N@Z
?SetCurrency@CLexCurrency@@QAEXNK@Z
?Format@CLexCurrency@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@KH@Z
?GetCrncyOrigin@CLexCurrency@@SAII@Z
??1CLexCurrency@@QAE@XZ
lxdbal11vc8
?IsEOF@CLxRecordset@@QAEHXZ
?GetFieldValue@CLxRecordset@@QAEJPBDAAN@Z
?GetFieldValue@CLxRecordset@@QAEJPBDAAJ@Z
?Close@CLxRecordset@@QAEJXZ
?IsOpen@CLxRecordset@@QAEHXZ
??0CLxRecordset@@QAE@PAVCLxDatabase@@J@Z
?GetErrorText@CLxDatabase@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@J@Z
??1CLxRecordset@@UAE@XZ
?Open@CLxRecordset@@QAEJJPBDJJ@Z
rktool10vc8
??0CBitmapper@@QAE@XZ
??1CBitmapper@@QAE@XZ
?Backslash@CRK_GlobTool@@SAJAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N@Z
?GetFlaggeID@CBitmapper@@QAEJJ@Z
mfc80
ord5382
ord6219
ord5102
ord1010
ord3806
ord5583
ord2018
ord2063
ord4326
ord3801
ord4014
ord4038
ord757
ord1187
ord1191
ord6754
ord266
ord1049
ord314
ord5383
ord2248
ord1917
ord265
ord1050
ord6252
ord495
ord496
ord1412
ord2164
ord6067
ord6090
ord2657
ord2497
ord3244
ord2094
ord4100
ord1955
ord1283
ord2371
ord4125
ord1903
ord4016
ord3832
ord3255
ord5434
ord5497
ord4735
ord4212
ord751
ord677
ord605
ord562
ord444
ord354
ord3182
ord4262
ord5203
ord2838
ord1401
ord5912
ord6724
ord1551
ord1670
ord1671
ord2020
ord4890
ord5182
ord3641
ord2168
ord5725
ord4115
ord5738
ord4580
ord3609
ord3602
ord3428
ord590
ord1144
ord3635
ord1128
ord2141
ord331
ord476
ord701
ord1920
ord2931
ord5224
ord5226
ord3948
ord4568
ord5230
ord5213
ord1001
ord5566
ord764
ord1198
ord907
ord5403
ord2468
ord876
ord4108
ord3997
ord2271
ord578
ord781
ord911
ord908
ord784
ord297
ord310
ord1073
ord1185
ord5717
ord564
ord755
ord3867
ord866
ord3019
ord762
ord4481
ord3333
ord566
ord4293
ord4541
ord4553
ord3683
ord761
ord573
ord5833
ord4063
ord5731
ord3109
ord347
ord602
ord910
ord5427
ord783
ord300
ord4035
ord1308
ord313
ord2176
ord304
ord5613
ord5641
ord4123
ord4001
ord6305
ord4353
ord6725
ord5915
ord1620
ord1617
ord3946
ord1402
ord4244
ord5152
ord1908
ord5073
ord4185
ord5214
ord3403
ord4722
ord4282
ord1600
ord1489
ord2902
ord765
ord315
ord1037
ord1092
ord1206
ord1208
ord1098
ord371
ord1167
ord1120
ord1201
ord1175
ord1177
ord1209
ord581
ord5960
ord5235
ord5233
ord923
ord928
ord932
ord930
ord934
ord2390
ord2410
ord2394
ord2400
ord2398
ord2396
ord2413
ord2408
ord2392
ord2415
ord2403
ord2385
ord2387
ord2405
ord2178
ord2172
ord1522
ord6279
ord3802
ord6277
ord3345
ord4967
ord1362
ord5175
ord1964
ord1656
ord1655
ord1599
ord5200
ord2537
ord2731
ord2835
ord4307
ord2714
ord2862
ord2540
ord2646
ord2533
ord3718
ord3719
ord3709
ord2644
ord3949
ord4486
ord4261
ord423
ord660
ord2372
ord2367
ord5637
ord1279
ord1063
ord3161
ord2368
ord1280
ord3287
ord1934
ord2322
ord1123
ord3210
ord1084
ord1482
ord6703
ord299
ord6275
msvcr80
memmove_s
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
wcslen
_strdup
calloc
wcscpy_s
memset
_recalloc
_mbsnbcpy_s
_resetstkoflw
memcpy_s
strcat_s
wcsncpy_s
strcpy_s
free
malloc
__CxxFrameHandler3
sprintf_s
_CxxThrowException
kernel32
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
FindResourceA
LoadLibraryExA
GetModuleHandleA
InterlockedExchange
GetVersion
CompareStringA
CompareStringW
lstrcmpiW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetStringTypeExA
LoadResource
LocalFree
LocalAlloc
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
SizeofResource
FreeLibrary
IsDBCSLeadByte
GetModuleFileNameA
lstrcmpiA
lstrlenA
lstrlenW
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
WideCharToMultiByte
GetStringTypeExW
MultiByteToWideChar
GetLastError
user32
GetWindowRect
SetMenu
GetMenu
PostMessageA
AppendMenuA
CreatePopupMenu
InvalidateRect
GetWindow
CharUpperW
CharUpperA
CharLowerA
CharNextA
IsWindow
OffsetRect
EnableWindow
GetParent
GetDesktopWindow
ReleaseDC
GetDC
GetClientRect
SendMessageA
LoadBitmapA
InflateRect
UnregisterClassA
CharLowerW
GetSysColor
gdi32
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectA
CreatePen
GetObjectA
GetTextExtentPoint32A
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
ole32
CoCreateInstance
OleRun
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
oleaut32
SysStringByteLen
SysAllocStringByteLen
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
VariantClear
VariantInit
VariantCopy
SysFreeString
SysStringLen
SetErrorInfo
VariantChangeType
GetErrorInfo
CreateErrorInfo
lxtool91vc8
?GetRuntimeClass@CLexSheet@@UBEPAUCRuntimeClass@@XZ
??0CLexSheet@@QAE@XZ
??1CLexSheet@@UAE@XZ
?GetThisMessageMap@CLexSheet@@KGPBUAFX_MSGMAP@@XZ
?vSortRowsN@CLexSheet@@QAEXJJJF@Z
?vDepressColHeader@CLexSheet@@QAEXJ@Z
?lGetRowUserData@CLexSheet@@QAEJJ@Z
?lGetCursorRow@CLexSheet@@QAEJXZ
?vSetRowHeightInPixels@CLexSheet@@QAEXJF@Z
?vShowGrid@CLexSheet@@QAEXF@Z
?vSetColorBkGnd@CLexSheet@@QAEXK@Z
?vAllowRowResize@CLexSheet@@QAEXF@Z
?WindowProc@CLexSheet@@UAEJIIJ@Z
?vSetDoubleData@CLexSheet@@QAEXJJN@Z
?vSetMissing@CLexSheet@@QAEXJJ@Z
?bGetDoubleData@CLexSheet@@QAEFJJAAN@Z
?OnCreate@CLexSheet@@MAEHPAUtagCREATESTRUCTA@@@Z
?DrawBitmap@@YAXPAVCDC@@PAVCBitmap@@AAVCRect@@KH@Z
?lCalcIndex@CLexSheet@@IAEJJJ@Z
?Invalidate@CLexSheet@@QAEXH@Z
?vShowRow@CLexSheet@@QAEXJF@Z
??BCDate@@QBE?AVLX_DATE@@XZ
?AktDatum@CDate@@SA?AV1@XZ
?RegisterClassA@CCurrencyButton@@SAHPAUHINSTANCE__@@@Z
?RegisterClassA@CSelectButton@@SAHXZ
?RegisterBmpBttnClass@CBmpTextButton@@SAHPAUHINSTANCE__@@@Z
?RegisterControlClasses@CLexEdit@@SAHPAUHINSTANCE__@@@Z
?bRegisterControlClass@CLexSheet@@SAHPAUHINSTANCE__@@@Z
?OnSize@CLexSheet@@MAEXIHH@Z
?OnPaint@CLexSheet@@MAEXXZ
?OnHScroll@CLexSheet@@MAEXIIPAVCScrollBar@@@Z
?OnVScroll@CLexSheet@@MAEXIIPAVCScrollBar@@@Z
?OnGetDlgCode@CLexSheet@@MAEIXZ
?OnMouseActivate@CLexSheet@@MAEHPAVCWnd@@II@Z
?OnActivate@CLexSheet@@MAEXIPAVCWnd@@H@Z
?OnSetFocus@CLexSheet@@MAEXPAVCWnd@@@Z
?OnKillFocus@CLexSheet@@MAEXPAVCWnd@@@Z
?OnTimer@CLexSheet@@MAEXI@Z
?OnMouseMove@CLexSheet@@MAEXIVCPoint@@@Z
?OnMouseLeave@CLexSheet@@MAEJIJ@Z
?OnLButtonDown@CLexSheet@@MAEXIVCPoint@@@Z
?OnLButtonUp@CLexSheet@@MAEXIVCPoint@@@Z
?OnLButtonDblClk@CLexSheet@@MAEXIVCPoint@@@Z
?OnRButtonDown@CLexSheet@@MAEXIVCPoint@@@Z
?OnRButtonUp@CLexSheet@@MAEXIVCPoint@@@Z
?SetValue@CLexFloatEdit@@QAEHN@Z
?GetValue@CLexFloatEdit@@QAEHPANH@Z
?GetParam@CSelectButton@@QAEJXZ
??0CSelItem@@QAE@JV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVCBitmap@@@Z
??1CSelItem@@UAE@XZ
?SetSelItemList@CSelectButton@@QAEXPAVCObList@@HH@Z
?Create@CLexSheet@@QAEHKABUtagRECT@@PAVCWnd@@I@Z
?OnKeyDown@CLexSheet@@MAEXIII@Z
?OnSysKeyDown@CLexSheet@@MAEXIII@Z
?OnKeyUp@CLexSheet@@MAEXIII@Z
?OnEraseBkgnd@CLexSheet@@MAEHPAVCDC@@@Z
?OnNcCalcSize@CLexSheet@@MAEXHPAUtagNCCALCSIZE_PARAMS@@@Z
?OnSetRedraw@CLexSheet@@MAEJIJ@Z
?OnEditKillFocus@CLexSheet@@MAEXXZ
?OnCbnSelChange@CLexSheet@@MAEXXZ
?OnCbnCloseUp@CLexSheet@@MAEXXZ
?OnMouseWheel@CLexSheet@@UAEHIFVCPoint@@@Z
?OnRegisteredMouseWheel@CLexSheet@@UAEJIJ@Z
?SetModified@CLexSheet@@UAEXH@Z
?SetWindowPos@CLexSheet@@UAEHPBVCWnd@@HHHHI@Z
?MoveWindow@CLexSheet@@UAEXPBUtagRECT@@H@Z
?MoveWindow@CLexSheet@@UAEXHHHHH@Z
?vSetFont@CLexSheet@@QAEXJJPAUHFONT__@@@Z
?bGetLongData@CLexSheet@@QAEFJJAAJ@Z
?vMoveCursor@CLexSheet@@QAEXJJJJF@Z
?lGetMaxRow@CLexSheet@@QAEJXZ
?GetWindowRect@CLexSheet@@QAEXPAUtagRECT@@@Z
?OnDraw@CLexSheet@@MAEXPAVCDC@@VCRect@@@Z
?vSetLongData@CLexSheet@@QAEXJJJ@Z
?vSetLongFormat@CLexSheet@@QAEXJJF@Z
?vSetRowUserData@CLexSheet@@QAEXJJ@Z
?vSetMaxRow@CLexSheet@@QAEXJ@Z
?vSetVarCol@CLexSheet@@QAEXJ@Z
?vSetDoubleFormat@CLexSheet@@QAEXJJFF@Z
?vSetStringFormat@CLexSheet@@QAEXJJFF@Z
?vSetColor@CLexSheet@@QAEXJJKK@Z
?vAllowEdit@CLexSheet@@QAEXJJF@Z
?vSetColWidthInPixels@CLexSheet@@QAEXJF@Z
?vSetStringData@CLexSheet@@QAEXJJV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?vSetOwnerDraw@CLexSheet@@QAEXJJF@Z
?vShowCol@CLexSheet@@QAEXJF@Z
?vSetMaxCol@CLexSheet@@QAEXJ@Z
?vTabToEditCell@CLexSheet@@QAEXF@Z
?vSetMultiSelect@CLexSheet@@QAEXF@Z
?vSetClickSelect@CLexSheet@@QAEXF@Z
?vAllowColResize@CLexSheet@@QAEXF@Z
?vSetListBoxMode@CLexSheet@@QAEXF@Z
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ