s:\serviceapp\ServiceAppImp\Release\hposva08.pdb
Static task
static1
Behavioral task
behavioral1
Sample
31ee8bf9097f73b4c4508b2aa9412d5d_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
31ee8bf9097f73b4c4508b2aa9412d5d_JaffaCakes118
-
Size
817KB
-
MD5
31ee8bf9097f73b4c4508b2aa9412d5d
-
SHA1
f42626005798910b2daa475f45e37975c8b8166f
-
SHA256
b0f9da0ac0a85d576a7c57cc9287cb0a4f9b5fd7d8dabbdea1b5d58f8f9c285f
-
SHA512
d2d5d01cfe7579d81be5f2d572bf2d65224028a4ae5e32ce47043999e5c70360cecc8a1d5b911e9a0d90a8ab97254782c24e8fb881fce872f0bd5b799b6b93a2
-
SSDEEP
12288:yQVmeOyscE0bDFKbrVQn3YHO1yYiNIWNOmwSsMDR95mRZN1Fh+E7wa/D1HZ:yQBK3yAO1FOIWNFw3WTmRZN1T+vWN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31ee8bf9097f73b4c4508b2aa9412d5d_JaffaCakes118
Files
-
31ee8bf9097f73b4c4508b2aa9412d5d_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
232b5030b87df490ad8f3a0cb110a64d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileSizeEx
GetFileTime
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
GetDriveTypeA
SetEnvironmentVariableA
SetCurrentDirectoryA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
ExitThread
CreateThread
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapReAlloc
Sleep
ExitProcess
HeapSize
HeapCreate
HeapDestroy
DuplicateHandle
FatalAppExitA
GetTimeZoneInformation
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
GetStringTypeW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetStringTypeExA
MoveFileA
FreeResource
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalFlags
GetCurrentDirectoryA
SystemTimeToFileTime
GetThreadLocale
GetAtomNameA
GlobalGetAtomNameA
TlsFree
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetCurrentProcessId
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
InterlockedExchange
lstrcmpA
GetModuleFileNameW
SetLastError
CopyFileA
GlobalSize
GetModuleHandleA
LoadLibraryExA
IsDBCSLeadByte
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
GetProfileStringA
FormatMessageA
RaiseException
OutputDebugStringA
WriteFile
GetTickCount
MulDiv
ReadFile
GetCurrentThreadId
lstrcmpiA
CreateMutexA
WaitForSingleObject
GetLastError
ReleaseMutex
GetPrivateProfileSectionNamesA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalAddAtomA
GlobalDeleteAtom
DeleteCriticalSection
InitializeCriticalSection
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
DeleteFileA
GetShortPathNameA
GetFileAttributesA
CreateDirectoryA
MultiByteToWideChar
GetProcAddress
FreeLibrary
SetErrorMode
LocalAlloc
LoadLibraryA
LocalFree
GetModuleFileNameA
lstrcpyA
lstrcpynA
SetFilePointer
LocalLock
LocalUnlock
LocalSize
LocalReAlloc
CreateFileA
CloseHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetPrivateProfileIntA
lstrlenA
GetVersion
lstrlenW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
VirtualFree
user32
LockWindowUpdate
SetCapture
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
UpdateWindow
GetClientRect
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
CallWindowProcA
GetMenu
OffsetRect
IntersectRect
GetDCEx
GetDesktopWindow
GetDlgCtrlID
PtInRect
EndPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
DeleteMenu
GetSysColor
GetSysColorBrush
UnregisterClassA
GetLastActivePopup
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
UnionRect
SetParent
GetSystemMenu
IsRectEmpty
MapVirtualKeyA
GetKeyNameTextA
WindowFromPoint
TrackPopupMenu
KillTimer
SetTimer
UnpackDDElParam
ReuseDDElParam
LoadMenuA
GetMenuBarInfo
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorA
GetDialogBaseUnits
InvalidateRect
SetRectEmpty
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
DestroyMenu
InflateRect
CharUpperA
DestroyIcon
ScrollWindowEx
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
GetWindowPlacement
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetSubMenu
RemoveMenu
GetWindow
GetClassNameA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetMenuItemCount
GetMenuItemInfoA
SetMenuItemInfoA
CharNextW
CharNextA
LoadCursorA
RegisterClassA
CreateWindowExA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
IsIconic
ShowWindow
MsgWaitForMultipleObjects
PostQuitMessage
GetWindowLongA
DefWindowProcA
SetWindowLongA
TranslateMessage
DispatchMessageA
PostMessageA
PeekMessageA
GetDC
ReleaseDC
IsWindow
GetWindowRect
GetParent
SetWindowPos
SystemParametersInfoA
GetSystemMetrics
SetRect
GetDlgItem
IsWindowEnabled
EnableWindow
LoadStringA
RegisterWindowMessageA
SendMessageA
wsprintfA
BeginPaint
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegCreateKeyExA
RegSetValueExW
RegSetValueExA
RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyA
ole32
OleDuplicateData
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemRealloc
CoDisconnectObject
CreateFileMoniker
CoGetInstanceFromFile
ProgIDFromCLSID
CoTaskMemFree
CreateBindCtx
StringFromGUID2
MkParseDisplayName
GetRunningObjectTable
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromString
CoInitializeEx
CoTaskMemAlloc
shell32
ExtractIconA
DragFinish
DragQueryFileA
SHGetFileInfoA
oleaut32
SysStringLen
SysFreeString
VarBstrCat
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
SysStringByteLen
VarBstrFromDate
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarDateFromStr
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
GetErrorInfo
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
LoadRegTypeLi
VariantInit
CreateErrorInfo
SetErrorInfo
VarBstrCmp
VariantChangeType
VariantCopy
VariantClear
shlwapi
PathStripToRootA
PathFindFileNameA
PathRemoveExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathFindExtensionA
gdi32
GetBkColor
CreateCompatibleBitmap
StretchDIBits
CreateFontA
GetCharWidthA
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetTextExtentPoint32A
GetDCOrgEx
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreateCompatibleDC
CreatePatternBrush
CreateFontIndirectA
GetDeviceCaps
GetTextMetricsA
SelectObject
GetObjectA
GetStockObject
CopyMetaFileA
CreateDCA
CreateBitmap
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
DeleteObject
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
Exports
Exports
?COMWndProc@@YGJPAUHWND__@@IIJ@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 537KB - Virtual size: 537KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ