c:\workspace\soma\label\windows-i586-soma\media\build\native\Win32\jmc2\Release\jmc2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6aea27c417ef3caa468e222848afa08c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6aea27c417ef3caa468e222848afa08c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6aea27c417ef3caa468e222848afa08c_JaffaCakes118
-
Size
584KB
-
MD5
6aea27c417ef3caa468e222848afa08c
-
SHA1
8971b8f5b01c6999875c16a9bc82a6fafce5abeb
-
SHA256
5fe1dd730b25335269a61e89dc31df94752ebd486a2d7e0c110e795233b8865e
-
SHA512
da2e5e4db8ad0b43f4484ea1eb0f6bcfbd0dd4fde8859daa9323dcb9cf0a25e8de13186bd357718d94a11a20462ff3eea40d6d88e6c67e83cbeccea384b7b305
-
SSDEEP
12288:pp4X22vwS+ZXlJSuT0Sc4pw+6zlbMjPGfiAX:pN2Ibh7T0gJKkCio
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aea27c417ef3caa468e222848afa08c_JaffaCakes118
Files
-
6aea27c417ef3caa468e222848afa08c_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
45befc1709c8f18c03e6ede7934392d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
LoadLibraryA
GetProcAddress
lstrcatW
GetModuleFileNameW
lstrcpyW
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
QueryPerformanceFrequency
GetTempPathA
SignalObjectAndWait
CreateMutexW
ReleaseMutex
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
LocalFree
lstrlenA
MultiByteToWideChar
GetVersionExA
CreateEventW
ResetEvent
ResumeThread
SetEvent
CompareStringW
GetCurrentThread
OutputDebugStringW
GetModuleHandleW
lstrcmpiW
lstrcpynW
CloseHandle
WaitForMultipleObjectsEx
WaitForSingleObject
user32
CharNextW
wsprintfW
PeekMessageW
TranslateMessage
DispatchMessageW
SetRectEmpty
advapi32
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteKeyW
ole32
StringFromGUID2
CoInitializeEx
CoTaskMemFree
StringFromCLSID
CoCreateInstance
CoWaitForMultipleHandles
CoTaskMemAlloc
CoUninitialize
oleaut32
VarUI4FromStr
LoadRegTypeLi
SysAllocStringByteLen
VariantClear
LoadTypeLi
SysAllocString
SysFreeString
RegisterTypeLi
SysStringLen
UnRegisterTypeLi
shlwapi
PathFindExtensionW
msvcp71
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?_Nomemory@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
msvcr71
rand
_vsnprintf
_onexit
__dllonexit
??1type_info@@UAE@XZ
__security_error_handler
_callnewh
memset
_CIpow
_beginthreadex
_endthreadex
wcschr
realloc
?what@exception@@UBEPBDXZ
memmove
??0exception@@QAE@XZ
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
wcslen
??_V@YAXPAX@Z
_purecall
wcsncpy
__CxxFrameHandler
??3@YAXPAX@Z
_except_handler3
_CxxThrowException
free
__CppXcptFilter
_adjust_fdiv
_initterm
malloc
?terminate@@YAXXZ
getenv
atoi
toupper
fwrite
ftell
fseek
fscanf
sprintf
fclose
fopen
fgets
fprintf
remove
_snprintf
strncpy
sscanf
_ftol
swprintf
memcpy
ceil
_strnicmp
labs
strlen
strncmp
wcscmp
wcscpy
memcmp
winmm
timeGetTime
gdi32
SelectObject
CreateBitmap
CreateFontA
SetTextColor
SetBkColor
SetBkMode
BitBlt
ExtTextOutA
GetPixel
DeleteObject
DeleteDC
CreateCompatibleDC
shell32
SHGetFileInfoW
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
_JNI_OnLoad@8
_JNI_OnUnload@8
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsCreate@8
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsFillMetadata@20
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsFillTracks@20
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsFinalize@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsGetBalance@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsGetBufferProgress@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsGetCaps@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsGetContainerDescr@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsGetContainerType@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsGetDuration@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsGetMediaTime@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsGetRate@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsGetStartTime@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsGetStopTime@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsGetVolume@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsInit@12
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsIsLightweight@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsPause@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsSetAutoRepeat@20
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsSetBalance@20
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsSetBounds@32
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsSetMediaTime@24
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsSetParent@36
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsSetRate@24
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsSetSource@28
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsSetStartTime@24
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsSetStopTime@24
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsSetVisible@20
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsSetVolume@20
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsStart@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsStop@16
_Java_com_sun_media_jmcimpl_plugins_directshow_DShowEngine_ndsTransferFrame@28
Sections
.text Size: 380KB - Virtual size: 378KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ