d:\Project\Kies 1.2\0.Source\branches\Output\Release(x86)\Program Files\Kies\MP3HDEncoder.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5d06752ece6e5baa50bc414f62fe0caa_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d06752ece6e5baa50bc414f62fe0caa_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5d06752ece6e5baa50bc414f62fe0caa_JaffaCakes118
-
Size
615KB
-
MD5
5d06752ece6e5baa50bc414f62fe0caa
-
SHA1
0fec500cacb798dbfa06cc1064fabfe3814a6dca
-
SHA256
3daad1ad19235bc2e31907dcd3b15e7ff6bbddd654acda961c782cf5c16b5a7b
-
SHA512
8798d5b2fc65f99890e671bdad7c6f348f2e5f5fdce51cb46e063fe97f011b3825418ffb5ad94fed72ffbcc528c57a1b1e0862e74d691d0898a2b4a12f7002f2
-
SSDEEP
12288:6/Y0NMvxaAT2YtVY8UWoNNK9OQS9pw6WKIeOPBdgsO3ca+G20zt:6/Y0exaAT2YXJUWqktyw6WKyBdxscl0x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d06752ece6e5baa50bc414f62fe0caa_JaffaCakes118
Files
-
5d06752ece6e5baa50bc414f62fe0caa_JaffaCakes118.dll windows:5 windows x86 arch:x86
01f53230ab5ba1f6c33627afbde8d939
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
libmmd
__libm_sse2_log
__libm_sse2_atan
__libm_sse2_atanf
log10
__libm_sse2_log10f
__libm_sse2_logf
tanh
ldexp
sin
exp
atan
floor
log
pow
ceil
cos
msvcr90
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
strncmp
free
__iob_func
remove
fopen
fread
fprintf
fwrite
ftell
fseek
fclose
memset
memcpy
vsprintf
memmove
memcmp
calloc
malloc
strcpy
atoi
vfprintf
fflush
printf
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_except_handler3
strrchr
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
Exports
Exports
ReturnErrorMessage
encode_mp3HD
Sections
.text Size: 305KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 164KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE