f:\작업\스마트팝\SmartPop(pandoratv)\SmartPop\Release\SmartPop.pdb
Static task
static1
Behavioral task
behavioral1
Sample
32698e44527927b0bbc68144e87f78c9_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
32698e44527927b0bbc68144e87f78c9_JaffaCakes118
-
Size
160KB
-
MD5
32698e44527927b0bbc68144e87f78c9
-
SHA1
10b769204e6029acd2a6f829790da79f77c6d430
-
SHA256
97ffe59578243cf1a3e778193347b0ec9a138e6b9a42f71d03f9d1f643b87a66
-
SHA512
2bcd730468673bae3d085036fede6cc50dc123be3f40d8e241010306f72a529dfef14bdb88a21fdb2215749bd401025363bb64464f964ab707102a0584be77b5
-
SSDEEP
1536:w87mNqH+PE5sRUpbkvXqtrICXmrdu3DsNkVWbpEH+HNW1zHIcq101u5cfKy5WQ:17u25sRLLCXmr2Ds6a0Brq+u5cfKy5D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32698e44527927b0bbc68144e87f78c9_JaffaCakes118
Files
-
32698e44527927b0bbc68144e87f78c9_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
e29a93eea8274dbf4fd687f63e158c18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
iphlpapi
GetAdaptersInfo
kernel32
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetProcAddress
GetModuleHandleA
lstrlenA
lstrcmpiA
GetModuleFileNameA
GetModuleHandleW
IsDBCSLeadByte
FreeLibrary
SizeofResource
lstrlenW
FindResourceA
LoadLibraryExA
SetThreadLocale
GetThreadLocale
LockResource
FindResourceExA
GetLocalTime
FlushFileBuffers
CloseHandle
CreateFileA
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
RaiseException
LoadResource
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualFree
HeapCreate
WriteFile
GetStdHandle
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
user32
SetWindowPos
CharNextW
SetFocus
GetWindowRect
CharNextA
advapi32
RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
ole32
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
OleRun
oleaut32
LoadRegTypeLi
DispCallFunc
SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantCopy
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
GetErrorInfo
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ