O:\OOO330\ooo\embedserv\wntmsci12.pro\bin\inprocserv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
43192153338b6885415613777562f0bb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43192153338b6885415613777562f0bb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
43192153338b6885415613777562f0bb_JaffaCakes118
-
Size
139KB
-
MD5
43192153338b6885415613777562f0bb
-
SHA1
a4e7d5d3f3bd5218e273aa6256636031a32c64a6
-
SHA256
f2772e664c3bc861c04c50128b9ba9e464902fe679f298f98331bde45e0aad96
-
SHA512
35de7922c9ece6a86255cbfac6e9fa63b8cce6228ff0e34f66306e1263f4b308863f1645f78e56b0c62f5b3c1aed919b1f7b16e0a7234608b55d2c99b03d3dc1
-
SSDEEP
1536:f9xOYErkUEL+tMrsIle4Eqan2pGFhubm2NHFN8JiGlbx3lqLo5yerh18FsTMXLl8:NvJrsIwI+JiohyzFsTMB8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43192153338b6885415613777562f0bb_JaffaCakes118
Files
-
43192153338b6885415613777562f0bb_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
9a401ac7924cb2345551754e09f94e6e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ole32
CoDisconnectObject
OleCreateDefaultHandler
advapi32
RegOpenKeyA
RegSetValueExA
RegCloseKey
kernel32
CompareStringW
SetEnvironmentVariableA
GetEnvironmentStringsW
GetModuleFileNameA
GetModuleHandleA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
RtlUnwind
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoW
GetTimeZoneInformation
CompareStringA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetVersionInfo
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ