O:\OOO330\ooo\filter\wntmsci12.pro\bin\expmi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
447202b8f15d323c85f2839e5ae357ef_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
447202b8f15d323c85f2839e5ae357ef_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
447202b8f15d323c85f2839e5ae357ef_JaffaCakes118
-
Size
10KB
-
MD5
447202b8f15d323c85f2839e5ae357ef
-
SHA1
401f4987ceb535607ab43b09f627a68e4bb82fe6
-
SHA256
eed379e88cf53f5e055cbc24c83efeed62eea08431c4e0fc240a194f3827628b
-
SHA512
9b85a3824ea9f18713807adc584646563319d7ddf1c1eca910f1f39adb1e5ef6f131e08080e482734bccbe4d5cb0dd86bfef3a1351a8207d114382636aea00c5
-
SSDEEP
192:ObtQjSD2sXuSEp70WZnc6K1CT7iCc3XJOZ4chzGfj6aT+:ChldG7P9cvCT7iCUZOvqmb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 447202b8f15d323c85f2839e5ae357ef_JaffaCakes118
Files
-
447202b8f15d323c85f2839e5ae357ef_JaffaCakes118.dll windows:5 windows x86 arch:x86
7137b04eaa88657456cf8abc2fcb641d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
vclmi
??0Bitmap@@QAE@XZ
??0GraphicConversionParameters@@QAE@ABVSize@@_N11@Z
?GetBitmapEx@Graphic@@QBE?AVBitmapEx@@ABVGraphicConversionParameters@@@Z
?GetBitmap@BitmapEx@@QBE?AVBitmap@@PBVColor@@@Z
??4Bitmap@@QAEAAV0@ABV0@@Z
??1Bitmap@@QAE@XZ
?IsTransparent@Graphic@@QBEEXZ
?GetBitCount@Bitmap@@QBEGXZ
?Convert@Bitmap@@QAEEW4BmpConversion@@@Z
?GetMask@BitmapEx@@QBE?AVBitmap@@XZ
?Replace@Bitmap@@QAEEABV1@ABVColor@@@Z
?AcquireReadAccess@Bitmap@@QAEPAVBitmapReadAccess@@XZ
?GetPaletteEntryCount@BitmapReadAccess@@QBEGXZ
?ReleaseAccess@Bitmap@@QAEXPAVBitmapReadAccess@@@Z
??1BitmapEx@@QAE@XZ
?GetPixel@BitmapReadAccess@@QBE?AVBitmapColor@@JJ@Z
?GetBestMatchingColor@BitmapReadAccess@@QAE?AVBitmapColor@@ABV2@@Z
tlmi
?SetNumberFormatInt@SvStream@@QAEXG@Z
??6SvStream@@QAEAAV0@PBD@Z
??6SvStream@@QAEAAV0@E@Z
?CreateFromInt32@ByteString@@SA?AV1@JF@Z
??6SvStream@@QAEAAV0@D@Z
??1ByteString@@QAE@XZ
sal3
rtl_uString_release
rtl_uString_new
svtmi
?GetStatusIndicator@FilterConfigItem@@QBE?AV?$Reference@VXStatusIndicator@task@star@sun@com@@@uno@star@sun@com@@XZ
msvcr90
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_encode_pointer
_malloc_crt
free
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
Exports
Exports
GetVersionInfo
GraphicExport
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ