General

Malware Config

Signatures

Files

• 41ffecc1aa0e59d0e22bcf44c0f66a12_JaffaCakes118

  .dll windows:6 windows x86 arch:x86

  09b7f981d014529e97710469e21cd044

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Use_Inch\Four_Happy\Fact-Supply\662\Since\Jump.pdb

  Imports

  kernel32

  EnumSystemLocalesW

  GetTimeZoneInformation

  GetUserDefaultLCID

  IsValidLocale

  GetTimeFormatW

  GetDateFormatW

  HeapAlloc

  HeapFree

  GetStdHandle

  GetFileType

  FindClose

  FindFirstFileExW

  FindNextFileW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetCommandLineW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEnvironmentVariableW

  GetProcessHeap

  SetFilePointerEx

  SetStdHandle

  HeapSize

  FlushFileBuffers

  WriteFile

  GetConsoleCP

  GetConsoleMode

  CloseHandle

  CreateFileW

  GetFileTime

  CreateProcessW

  GetCurrentProcessId

  MoveFileExW

  HeapReAlloc

  GetModuleFileNameW

  WriteConsoleW

  GetModuleHandleExW

  ExitProcess

  GetWindowsDirectoryW

  VirtualProtectEx

  FindNextChangeNotification

  LoadLibraryW

  FindCloseChangeNotification

  SetFileAttributesW

  FindFirstChangeNotificationW

  GetSystemDirectoryW

  WaitForSingleObject

  GetTempPathW

  DeviceIoControl

  MultiByteToWideChar

  GetStringTypeW

  WideCharToMultiByte

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  EncodePointer

  DecodePointer

  GetCPInfo

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  SetLastError

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetSystemTimeAsFileTime

  GetModuleHandleW

  GetProcAddress

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  IsProcessorFeaturePresent

  QueryPerformanceCounter

  GetCurrentThreadId

  InitializeSListHead

  IsDebuggerPresent

  GetStartupInfoW

  RtlUnwind

  RaiseException

  InterlockedFlushSList

  GetLastError

  FreeLibrary

  LoadLibraryExW

  user32

  GetForegroundWindow

  GetWindowTextW

  UnhookWinEvent

  SetWinEventHook

  SystemParametersInfoW

  CreateDialogIndirectParamW

  GetWindowTextLengthW

  GetMenuItemInfoW

  GetSystemMenu

  GetWindowRect

  GetIconInfo

  SetWindowTextW

  CreatePopupMenu

  RegisterClassExW

  IsDialogMessageW

  GetSysColorBrush

  ClientToScreen

  FrameRect

  GetDlgCtrlID

  DialogBoxIndirectParamW

  GetMessageTime

  LoadBitmapW

  LockWindowUpdate

  SetWindowsHookExW

  GetClientRect

  DrawTextW

  KillTimer

  CheckDlgButton

  gdi32

  SetTextColor

  CreateCompatibleBitmap

  GetCharWidthW

  CreateBitmap

  SetBkColor

  SetPixel

  GetTextExtentPoint32W

  GetClipBox

  StretchBlt

  PatBlt

  ole32

  OleUninitialize

  CoInitialize

  OleSetContainedObject

  CoUninitialize

  CoCreateInstance

  OleInitialize

  advapi32

  OpenServiceW

  SetServiceStatus

  OpenThreadToken

  RegQueryValueExW

  RegCreateKeyExW

  InitializeSecurityDescriptor

  SetEntriesInAclW

  RegisterServiceCtrlHandlerW

  DeleteService

  FreeSid

  RegDeleteKeyW

  GetTokenInformation

  OpenProcessToken

  QueryServiceStatus

  RegOpenKeyExW

  OpenSCManagerW

  StartServiceCtrlDispatcherW

  RegEnumKeyW

  RegSetValueExW

  SetSecurityDescriptorDacl

  AllocateAndInitializeSid

  LookupPrivilegeValueW

  RegCloseKey

  RegOpenKeyW

  avifil32

  AVIFileInfoW

  AVIFileReadData

  AVIFileOpenW

  AVIFileExit

  AVIFileInit

  AVIFileGetStream

  oleacc

  AccessibleObjectFromEvent

  WindowFromAccessibleObject

  AccessibleObjectFromWindow

  GetOleaccVersionInfo

  dhcpsapi

  DhcpRpcFreeMemory

  DhcpEnumSubnets

  DhcpDeleteClientInfo

  DhcpGetVersion

  DhcpGetSubnetInfo

  DhcpSetClientInfo

  DhcpGetClientInfo

  DhcpEnumSubnetClients

  DhcpCreateClientInfo

  DhcpGetServerBindingInfo

  Exports

  Exports

  AnyDark

  Bothbad

  Endegg

  Justtell

  Nextready

  Take

  Troubleenemy

  Sections

  .text

  Size: 355KB - Virtual size: 355KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 203KB - Virtual size: 203KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 60KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ