C:\BUILD_~1\jdk6_31\control\build\WINDOW~1\tmp\deploy\plugin\axbridge\obj\axbridge.pdb
Static task
static1
Behavioral task
behavioral1
Sample
65dcf2948b66fabeabd9d885a92dddd9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65dcf2948b66fabeabd9d885a92dddd9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
65dcf2948b66fabeabd9d885a92dddd9_JaffaCakes118
-
Size
180KB
-
MD5
65dcf2948b66fabeabd9d885a92dddd9
-
SHA1
c9b8556145c6b56b2820cbe10ebfac98448956df
-
SHA256
002015ad0f59b3e661121ddb9de0c6e959fb00aedf295b23628b843005dadf62
-
SHA512
2d06360fc87923382e3b0cf10c8251e55ebbbcb9cae5deea8bedd0ca9fd84e6b388b1ef0b4f494e68fdbf4d549f7d6e0c0ac597b6269ba05a00051f7e1a19f90
-
SSDEEP
3072:8L9TuYyBjhcv1hmdBtNDEbgaSG7rrrrrb7rmZUt2Dy3DPsO3333333333333333G:skbBjhOelNw8N8d7oxbAEx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65dcf2948b66fabeabd9d885a92dddd9_JaffaCakes118
Files
-
65dcf2948b66fabeabd9d885a92dddd9_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
49c682e127ba3620d14b7828d144dfc4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA
kernel32
OutputDebugStringA
lstrlenW
ResetEvent
CreateEventA
SetEvent
CloseHandle
GetLastError
LoadLibraryA
lstrcatA
GetProcAddress
SystemTimeToFileTime
GetSystemTime
MulDiv
FindResourceA
GetModuleFileNameA
LockResource
LoadResource
GetModuleHandleA
FreeLibrary
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedExchange
LocalFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
ExitProcess
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
lstrcpyA
GetCurrentProcess
FlushInstructionCache
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
SizeofResource
user32
IsWindowUnicode
GetMessageA
TranslateMessage
DispatchMessageW
DispatchMessageA
PeekMessageA
LoadCursorA
wsprintfA
GetClassInfoExA
IsChild
SetWindowLongA
UnregisterClassA
SetPropA
GetWindowThreadProcessId
GetMessageW
RemovePropA
SetWindowsHookExA
UnhookWindowsHookEx
GetPropA
IsIconic
IsWindowVisible
BringWindowToTop
SetForegroundWindow
CallNextHookEx
GetSysColor
MoveWindow
CharNextA
WinHelpA
IsDialogMessageA
GetClientRect
GetKeyState
CallWindowProcA
GetDC
ReleaseDC
UnionRect
PtInRect
DefWindowProcA
GetWindowLongA
SetParent
GetDesktopWindow
CreateWindowExA
RegisterClassExA
IsWindow
ShowWindow
WindowFromDC
InvalidateRect
GetParent
GetFocus
SetFocus
DestroyWindow
EnableWindow
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
PostMessageA
BeginPaint
EndPaint
MsgWaitForMultipleObjects
SendMessageA
ole32
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoRevokeClassObject
CoRegisterClassObject
CoCreateInstance
CLSIDFromString
StringFromCLSID
OleSaveToStream
WriteClassStm
OleRegGetMiscStatus
OleLoadFromStream
oleaut32
SysAllocStringLen
OleCreatePropertyFrame
OleCreateFontIndirect
OleTranslateColor
SafeArrayCreate
LoadTypeLi
LoadRegTypeLi
SysAllocString
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
VarUI4FromStr
SysFreeString
msvcr71
__security_error_handler
__CppXcptFilter
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
memset
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
wcsncpy
memmove
sprintf
strncat
realloc
??2@YAPAXI@Z
??_U@YAPAXI@Z
_purecall
__CxxFrameHandler
_CxxThrowException
_resetstkoflw
malloc
??_V@YAXPAX@Z
??3@YAXPAX@Z
free
_except_handler3
gdi32
BitBlt
SelectObject
CreateBitmap
CreateCompatibleDC
DeleteObject
DeleteMetaFile
PlayMetaFile
CloseMetaFile
SetMapMode
CreateMetaFileA
GetDeviceCaps
GetStockObject
RestoreDC
DeleteDC
SetViewportOrgEx
SetWindowOrgEx
SaveDC
LPtoDP
CreateDCA
CreateRectRgnIndirect
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_Java_sun_plugin_com_DispatchImpl_getWindowHandle@12
_Java_sun_plugin_com_event_COMEventHandler_nativeNotifyEvent@20
_Java_sun_plugin_com_event_COMEventHandler_nativeNotifyProperty@16
_Java_sun_plugin_com_event_COMEventHandler_nativeNotifyVetoable@16
_Java_sun_plugin_services_WPlatformService_dispatchNativeEvent@8
_Java_sun_plugin_viewer_AxBridgeObject_notifyStatusChange@16
_Java_sun_plugin_viewer_frame_AxBridgeEmbeddedFrame_transferFocus@16
_Java_sun_plugin_viewer_frame_IExplorerEmbeddedFrame_activateBrowserWindow@12
_Java_sun_plugin_viewer_frame_IExplorerEmbeddedFrame_enableModeless@24
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE