c:\Downloads\Sira\Engineering\Consulting\WildMedia\midaddle\Release\midaddle.pdb
Static task
static1
Behavioral task
behavioral1
Sample
650e47a177d8e85c94e00bda50abc33a_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
650e47a177d8e85c94e00bda50abc33a_JaffaCakes118
-
Size
116KB
-
MD5
650e47a177d8e85c94e00bda50abc33a
-
SHA1
50724ff7b0a5a23e53e97e026f03dbd7d0c49c12
-
SHA256
01403e5d6caf2adc7cbcbc92661632638c7e00d67dc88c38b2a202adc71296c8
-
SHA512
49aada6eedb39b230df416a2c3747462e1883b1f9cf58a57c4128a22658df1f5df25fa6f2a2a192fca10d68e11afbc6cf1c76931415c88626f57f937378d257e
-
SSDEEP
1536:Ej9HekBdH7nOPjItiMzVzb906PA/APFiqSuZL/4kvSbiwmUwGHQVnX4MI8llOiAj:FOdH7nOPjmnzV1tdiqSijX4allUsG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 650e47a177d8e85c94e00bda50abc33a_JaffaCakes118
Files
-
650e47a177d8e85c94e00bda50abc33a_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
9c4e336f81093db9710a7c41052eb920
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
netapi32
Netbios
kernel32
GetLastError
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiA
lstrlenW
lstrlenA
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
RaiseException
LeaveCriticalSection
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
FreeLibrary
LoadLibraryExA
GetModuleHandleA
GetVolumeInformationA
CloseHandle
FlushFileBuffers
SetStdHandle
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCPInfo
EnterCriticalSection
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
GetOEMCP
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
GetCurrentThreadId
GetCommandLineA
HeapCreate
VirtualFree
IsBadWritePtr
GetProcAddress
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
LCMapStringA
user32
CharNextA
advapi32
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
shell32
SHGetFileInfoA
ole32
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
oleaut32
VarUI4FromStr
SysFreeString
SysStringLen
LoadRegTypeLi
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocStringLen
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
shlwapi
PathFindExtensionA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ