dmsynth.pdb
Static task
static1
Behavioral task
behavioral1
Sample
658e95e8a421e2229c5e1ae5c0374dfe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
658e95e8a421e2229c5e1ae5c0374dfe_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
658e95e8a421e2229c5e1ae5c0374dfe_JaffaCakes118
-
Size
277KB
-
MD5
658e95e8a421e2229c5e1ae5c0374dfe
-
SHA1
5985db8d66b2ab7c3edd4ab931e8b46ad5351409
-
SHA256
117119cb6561e4977360df79dc58563dd21bc8961240bc13e117be97450d8944
-
SHA512
61cba7cbc2db450c17ebf85d12503ea211e182d3ba263027e2b5462ced166a664ca56c0f5b099e4674bf2548d9e52712b69a37c14a02c82a3f65464e3a87e830
-
SSDEEP
6144:bG7vXT5ZZI8DJpncMHea8epOi59IEJ0W99KdFLQ9:bE9ISuCeuOi/IEb9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 658e95e8a421e2229c5e1ae5c0374dfe_JaffaCakes118
Files
-
658e95e8a421e2229c5e1ae5c0374dfe_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
88348090052dda79d51d9add6787813d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_adjust_fdiv
_initterm
wcscpy
wcstombs
free
malloc
__CxxFrameHandler
_CIpow
_ftol
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
MulDiv
IsBadReadPtr
IsBadWritePtr
InterlockedDecrement
InterlockedIncrement
lstrlenA
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
IsBadCodePtr
SetEvent
WaitForSingleObject
SetThreadPriority
CreateThread
TerminateProcess
CloseHandle
Sleep
GetModuleFileNameA
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateEventA
winmm
timeGetTime
advapi32
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
ole32
StringFromCLSID
CoTaskMemFree
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 195KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ