General

Malware Config

Signatures

Files

• 4a1db2ef2a84522c5718cfc77292ebea_JaffaCakes118

  .dll regsvr32 windows:4 windows x86 arch:x86

  c0d4a888925cfdc2acf94edd6c75208f

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  LoadLibraryA

  VirtualAlloc

  VirtualProtect

  GetProcAddress

  GetLastError

  GetCurrentThreadId

  lstrcmpA

  CreateTimerQueue

  FatalAppExitW

  SystemTimeToFileTime

  GetConsoleAliasExesW

  GlobalAddAtomW

  GetShortPathNameA

  DebugActiveProcessStop

  ExpandEnvironmentStringsA

  user32

  GetCursorInfo

  GetWindowThreadProcessId

  GetKeyboardType

  GetGUIThreadInfo

  GetWindowDC

  GetCursorPos

  SetRectEmpty

  AllowForegroundActivation

  DlgDirSelectComboBoxExW

  GetKeyboardLayoutList

  DrawTextExA

  DdeEnableCallback

  winspool.drv

  DeviceCapabilities

  SetPrinterDataA

  SetPrinterDataW

  GetJobW

  AdvancedDocumentPropertiesA

  SpoolerPrinterEvent

  StartPagePrinter

  ClosePrinter

  DeletePrinterDataExA

  ConfigurePortW

  PrinterMessageBoxA

  CreatePrinterIC

  OpenPrinterW

  DeleteFormA

  oledlg

  OleUIUpdateLinksW

  OleUIChangeIconW

  OleUIInsertObjectA

  OleUIBusyA

  OleUIChangeSourceA

  OleUIInsertObjectW

  OleUIAddVerbMenuA

  oleaut32

  VarDateFromCy

  VarR8FromUI1

  SafeArrayCreateEx

  BSTR_UserFree

  VarImp

  CreateTypeLib

  VarI4FromUI4

  VarR8FromStr

  VarUI1FromI8

  advapi32

  SaferSetLevelInformation

  ConvertAccessToSecurityDescriptorW

  InitializeSid

  EncryptedFileKeyInfo

  ComputeAccessTokenFromCodeAuthzLevel

  LookupPrivilegeValueW

  AccessCheckByTypeResultListAndAuditAlarmA

  gdi32

  DdEntry40

  GdiGetSpoolFileHandle

  AddFontResourceExA

  SetLayout

  EnumEnhMetaFile

  SetPixelV

  GetTextExtentExPointW

  EnumFontFamiliesA

  GetObjectType

  GdiIsPlayMetafileDC

  SetDCPenColor

  winmm

  timeGetSystemTime

  waveInReset

  midiOutGetNumDevs

  mixerGetDevCapsA

  waveOutPrepareHeader

  waveOutGetVolume

  mmioSeek

  mmioRenameA

  shell32

  SHGetFolderPathAndSubDirA

  DuplicateIcon

  OpenAs_RunDLLW

  PrintersGetCommand_RunDLLW

  ILFindLastID

  SHGetFileInfo

  SHCLSIDFromString

  DAD_DragEnterEx

  StrChrA

  SHAppBarMessage

  SheChangeDirExW

  SHCreateDirectory

  PickIconDlg

  DAD_SetDragImage

  comctl32

  CreateStatusWindow

  GetEffectiveClientRect

  ImageList_DragEnter

  ImageList_Draw

  CreateStatusWindowW

  AddMRUStringW

  _TrackMouseEvent

  CreateMRUListW

  comdlg32

  PrintDlgExA

  ChooseFontA

  GetOpenFileNameA

  FindTextW

  ChooseFontW

  GetSaveFileNameW

  FindTextA

  GetFileTitleA

  shlwapi

  PathGetArgsA

  PathUnExpandEnvStringsA

  wvnsprintfW

  UrlCombineW

  PathAddExtensionA

  PathIsUNCServerW

  PathIsSystemFolderA

  PathMakeSystemFolderA

  oleacc

  DllGetClassObject

  AccessibleObjectFromEvent

  ObjectFromLresult

  GetStateTextA

  DllRegisterServer

  CreateStdAccessibleProxyA

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnRegisterServer

  Sections

  .code

  Size: 311KB - Virtual size: 311KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 161B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 80KB - Virtual size: 79KB

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE