MP4SDECD.pdb
Static task
static1
Behavioral task
behavioral1
Sample
47cf4c02e9dc6935f8560ae2863a07a7_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
47cf4c02e9dc6935f8560ae2863a07a7_JaffaCakes118
-
Size
408KB
-
MD5
47cf4c02e9dc6935f8560ae2863a07a7
-
SHA1
d6861f493c1edafdba7892ea50b66427d6faf112
-
SHA256
813449d0e0d43b7c8006f076bbb94ea39c88ee3dc5ae648f2a47389155ec7146
-
SHA512
e8d68316d51691841dff4dea63a22a5ef4a780f17bab14e58efc232e2e4ff779e2bc1ca333abab76375550c95c94cc0ef89bb187161d14488889134a56a1358d
-
SSDEEP
6144:9+6qTnOXMkkIoA/Rn76m41Wp9WxqcEXWIrbR0VYhxmh7JoS1z8BY:A/SOIoAN76msi9WxKrLhKuy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47cf4c02e9dc6935f8560ae2863a07a7_JaffaCakes118
Files
-
47cf4c02e9dc6935f8560ae2863a07a7_JaffaCakes118.dll regsvr32 windows:6 windows x86 arch:x86
2c1547e19144146ae36c95738e5f128c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
memset
_XcptFilter
??3@YAXPAX@Z
_vsnwprintf
_purecall
memcpy
_CIsqrt
_CIcos
_CIsin
mfplat
MFHeapFree
MFHeapAlloc
user32
IsRectEmpty
GetDesktopWindow
ReleaseDC
GetDC
gdi32
GetSystemPaletteEntries
kernel32
GetSystemInfo
SetUnhandledExceptionFilter
DelayLoadFailureHook
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
RtlUnwind
Sleep
InterlockedExchange
GetModuleFileNameA
InterlockedIncrement
InterlockedCompareExchange
FreeLibrary
InitializeCriticalSection
QueryPerformanceCounter
DeleteCriticalSection
GetVersion
GetProcAddress
GetVersionExW
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryA
ole32
CoTaskMemAlloc
CoTaskMemFree
oleaut32
SysAllocString
SysFreeString
advapi32
RegOpenKeyW
RegCloseKey
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableFlags
GetTraceEnableLevel
RegCreateKeyExW
TraceEvent
RegQueryValueExW
RegSetValueA
RegSetValueExA
RegCreateKeyW
RegOpenKeyExW
RegSetValueExW
msdmo
DMORegister
MoCopyMediaType
MoFreeMediaType
MoInitMediaType
DMOUnregister
Exports
Exports
CreateInstance
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 251KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ