mmcbase.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3d50c51646e5570d8e6a31d0813689e5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d50c51646e5570d8e6a31d0813689e5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3d50c51646e5570d8e6a31d0813689e5_JaffaCakes118
-
Size
125KB
-
MD5
3d50c51646e5570d8e6a31d0813689e5
-
SHA1
3e5347500cefe2476d8d33c1cccd4ca78aed87c5
-
SHA256
568379ca85eb80e436cd11b4b55461e22d4921a6f9f186d5d2c9f262c6cbe7c5
-
SHA512
563dfb2c99e4a7971bcf8cf63f655040ca01d2fae31734284fd7a54dea4f8c0c45668813140e5c362fb54ebdeba2f62e2f5a3b375def2e6e34df2fb7e76542f7
-
SSDEEP
3072:6scvE2gkx6XOMm/jvq/cwO8SYgFfE6NWfmj57lH:6Hgkx6+MQjvq/B3mXoO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d50c51646e5570d8e6a31d0813689e5_JaffaCakes118
Files
-
3d50c51646e5570d8e6a31d0813689e5_JaffaCakes118.dll windows:5 windows x86 arch:x86
807b4db782127c2863025d4eb2623ddf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mfc42u
ord1179
ord342
ord823
ord825
msvcrt
_except_handler3
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
__dllonexit
?terminate@@YAXXZ
_onexit
_purecall
__CxxFrameHandler
_CxxThrowException
swprintf
realloc
free
malloc
exit
wcsncpy
msvcp60
?data@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
kernel32
GetFileAttributesW
QueryPerformanceCounter
GetTickCount
SearchPathW
LocalAlloc
GetProcAddress
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
DisableThreadLibraryCalls
ExpandEnvironmentStringsW
FormatMessageW
GetModuleHandleW
GetLastError
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
lstrcpynW
GetVersionExW
lstrcpyW
lstrcmpW
LocalFree
GetCurrentThreadId
user32
LoadStringW
MessageBoxW
IsWindowVisible
CharNextW
GetSystemMetrics
DrawFocusRect
DrawIcon
GetSysColor
GetDlgItemTextW
InvalidateRect
SetDlgItemTextW
SendMessageW
IsWindow
GetDlgItem
SetCursor
LoadCursorW
SendDlgItemMessageW
SetWindowLongW
EndDialog
DestroyIcon
GetWindowLongW
DialogBoxParamW
gdi32
SetBkColor
ExtTextOutW
oleaut32
VariantClear
VariantCopy
VarUI4FromStr
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
StringFromCLSID
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegDeleteValueW
comdlg32
GetOpenFileNameW
shell32
ExtractIconExW
Exports
Exports
??0?$CEventLock@UAppEvents@@@@QAE@XZ
??0CEventBuffer@@QAE@ABV0@@Z
??0CEventBuffer@@QAE@XZ
??0CMMCStrongReferences@@AAE@XZ
??0SC@mmcerror@@QAE@J@Z
??1?$CEventLock@UAppEvents@@@@QAE@XZ
??1CEventBuffer@@QAE@XZ
??4?$CEventLock@UAppEvents@@@@QAEAAV0@ABV0@@Z
??4CEventBuffer@@QAEAAV0@ABV0@@Z
??4CMMCStrongReferences@@QAEAAV0@ABV0@@Z
??4SC@mmcerror@@QAEAAV01@ABV01@@Z
??4SC@mmcerror@@QAEAAV01@J@Z
??7SC@mmcerror@@QBEHXZ
??8SC@mmcerror@@QBE_NABV01@@Z
??8SC@mmcerror@@QBE_NJ@Z
??9SC@mmcerror@@QBE_NABV01@@Z
??9SC@mmcerror@@QBE_NJ@Z
??BSC@mmcerror@@QBE_NXZ
??_FSC@mmcerror@@QAEXXZ
?AddRef@CMMCStrongReferences@@SGKXZ
?Clear@SC@mmcerror@@QAEXXZ
?FatalError@SC@mmcerror@@QBEXXZ
?FormatErrorIds@@YGXIVSC@mmcerror@@IPAG@Z
?FormatErrorShort@@YGXVSC@mmcerror@@IPAG@Z
?FormatErrorString@@YGXPBGVSC@mmcerror@@IPAGH@Z
?FromLastError@SC@mmcerror@@QAEAAV12@XZ
?FromMMC@SC@mmcerror@@QAEAAV12@J@Z
?FromWin32@SC@mmcerror@@QAEAAV12@J@Z
?GetCode@SC@mmcerror@@QBEJXZ
?GetComObjectEventSource@@YGAAV?$CEventSource@VCComObjectObserver@@VCVoid@@V2@V2@V2@@@XZ
?GetErrorMessage@SC@mmcerror@@QBEXIPAG@Z
?GetEventBuffer@@YGAAVCEventBuffer@@XZ
?GetFacility@SC@mmcerror@@ABE?AW4facility_type@12@XZ
?GetHWnd@SC@mmcerror@@SGPAUHWND__@@XZ
?GetHelpFile@SC@mmcerror@@SGPBGXZ
?GetHelpID@SC@mmcerror@@QAEKXZ
?GetHinst@SC@mmcerror@@SGPAUHINSTANCE__@@XZ
?GetMainThreadID@SC@mmcerror@@SGKXZ
?GetSingletonObject@CMMCStrongReferences@@CGAAV1@XZ
?GetStringModule@@YGPAUHINSTANCE__@@XZ
?HrFromSc@@YGJABVSC@mmcerror@@@Z
?InternalAddRef@CMMCStrongReferences@@AAEKXZ
?InternalLastRefReleased@CMMCStrongReferences@@AAE_NXZ
?InternalRelease@CMMCStrongReferences@@AAEKXZ
?IsError@SC@mmcerror@@QBE_NXZ
?IsLocked@CEventBuffer@@QAE_NXZ
?LastRefReleased@CMMCStrongReferences@@SG_NXZ
?Lock@CEventBuffer@@QAEXXZ
?MMCErrorBox@@YGHII@Z
?MMCErrorBox@@YGHIVSC@mmcerror@@I@Z
?MMCErrorBox@@YGHPBGI@Z
?MMCErrorBox@@YGHPBGVSC@mmcerror@@I@Z
?MMCErrorBox@@YGHVSC@mmcerror@@I@Z
?MMCUpdateRegistry@@YGJHPBVCObjectRegParams@@PBVCControlRegParams@@@Z
?MakeSc@SC@mmcerror@@AAEXW4facility_type@12@J@Z
?PickIconDlg@@YGHPAUHWND__@@PAGIPAH@Z
?Release@CMMCStrongReferences@@SGKXZ
?SCODEFromSc@@YGJABVSC@mmcerror@@@Z
?ScEmitOrPostpone@CEventBuffer@@QAE?AVSC@mmcerror@@PAUIDispatch@@JPAVCComVariant@ATL@@H@Z
?ScFlushPostponed@CEventBuffer@@AAE?AVSC@mmcerror@@XZ
?ScFromMMC@@YG?AVSC@mmcerror@@J@Z
?ScGetConsoleEventDispatcher@CConsoleEventDispatcherProvider@@SG?AVSC@mmcerror@@AAPAVCConsoleEventDispatcher@@@Z
?ScSetConsoleEventDispatcher@CConsoleEventDispatcherProvider@@SG?AVSC@mmcerror@@PAVCConsoleEventDispatcher@@@Z
?SetHWnd@SC@mmcerror@@SGXPAUHWND__@@@Z
?SetHinst@SC@mmcerror@@SGXPAUHINSTANCE__@@@Z
?SetMainThreadID@SC@mmcerror@@SGXK@Z
?Throw@SC@mmcerror@@QAEXJ@Z
?Throw@SC@mmcerror@@QAEXXZ
?ToHr@SC@mmcerror@@QBEJXZ
?TraceAndClear@SC@mmcerror@@QAEXXZ
?Trace_@SC@mmcerror@@QBEXXZ
?Unlock@CEventBuffer@@QAEXXZ
?s_dwMainThreadID@SC@mmcerror@@0KA
?s_hInst@SC@mmcerror@@0PAUHINSTANCE__@@A
?s_hWnd@SC@mmcerror@@0PAUHWND__@@A
?s_pDispatcher@CConsoleEventDispatcherProvider@@0PAVCConsoleEventDispatcher@@A
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ