msadcf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
39fac66f87d1f3d69ff0901ada1d2a36_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39fac66f87d1f3d69ff0901ada1d2a36_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
39fac66f87d1f3d69ff0901ada1d2a36_JaffaCakes118
-
Size
156KB
-
MD5
39fac66f87d1f3d69ff0901ada1d2a36
-
SHA1
69a3f8fa39228293404e7ba4323fb41df13d9155
-
SHA256
c94103cdca7a88f484c0b2ee89d8d2e1a772c6212139a9d6115d72f5f28a5b9e
-
SHA512
ea314a9d968e2a5fd73c1df19f0730615c51463ca881e4e6b74f3d8d9c8d9078e020ac8100ec97f3389b58036f1292547275573415246901c1fe5844a6628c85
-
SSDEEP
3072:5SINcor92L3rZoet1HiCsTotuCNA+ZqaVlSnxTg8befPH:EIbeZoet1CVyB0aVYxoP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39fac66f87d1f3d69ff0901ada1d2a36_JaffaCakes118
Files
-
39fac66f87d1f3d69ff0901ada1d2a36_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
55485dccf839f46fd22a8da67453628b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
wcscmp
tolower
?terminate@@YAXXZ
_CxxThrowException
__CxxFrameHandler
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
mbstowcs
wcsstr
_snwprintf
wcsncpy
wcsrchr
wcstol
_wcsicmp
wcschr
_wcsnicmp
_except_handler3
_purecall
free
malloc
wcslen
wcscpy
wcscat
kernel32
LoadLibraryA
VirtualAlloc
TerminateProcess
SetUnhandledExceptionFilter
GetCurrentProcess
GetTickCount
QueryPerformanceCounter
GlobalSize
GlobalLock
GlobalUnlock
GetCurrentThreadId
CompareStringA
GetUserDefaultLCID
FreeLibrary
GetProcAddress
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
UnhandledExceptionFilter
advapi32
RegCloseKey
ole32
GetHGlobalFromStream
CLSIDFromProgID
StringFromIID
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoGetMalloc
CreateStreamOnHGlobal
oleaut32
SafeArrayPtrOfIndex
SafeArrayGetLBound
SafeArrayGetUBound
DispGetParam
SafeArrayDestroy
GetErrorInfo
CreateErrorInfo
LoadRegTypeLi
SafeArrayCreateVector
SafeArrayLock
SafeArrayUnlock
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VariantClear
SetErrorInfo
SysStringLen
SysAllocStringLen
VariantInit
SafeArrayGetDim
msdart
RegCreateKeyI
RegQueryValueExI
RegSetValueExI
RegOpenKeyI
GetVersionExI
GetModuleFileNameI
RegCreateKeyExI
RegOpenKeyExI
LoadLibraryI
RegDeleteKeyI
RegEnumKeyExI
LoadStringI
_LoadVersionedResourceEx@16
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ