D:\Programiranje\Bravo Studio\gamevance\bin\gvtl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
72592ff879f4a3d29d6d291b9188a88f_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
72592ff879f4a3d29d6d291b9188a88f_JaffaCakes118
-
Size
228KB
-
MD5
72592ff879f4a3d29d6d291b9188a88f
-
SHA1
d609950259b331af9e08ce61dd8941a7787bf903
-
SHA256
59e49165ce79a4f1847cdb61c8e2e428738aba76363327aad44d36e804793426
-
SHA512
649316022dbcf804b6f7cf7781f31c720ff24fed8fa8b11067b0515ceeaef31d387a5dfe15112d67ec051e622363d001d73ecbc7a8c846e480434334322316ab
-
SSDEEP
3072:ONn4rbagdw3g/2azObMzbzlnrEi9C2BVXsTBf5vqE9Yx5Jomw:OEb5dqI2KcMzb8CXsTBBvqvdX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72592ff879f4a3d29d6d291b9188a88f_JaffaCakes118
Files
-
72592ff879f4a3d29d6d291b9188a88f_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
5c6135e8af4a4218a6ea574935d04458
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
shlwapi
StrStrIA
wnsprintfA
StrCmpNIA
StrCmpNA
StrToIntA
wvnsprintfA
StrNCatA
StrStrA
wininet
InternetConnectA
InternetOpenA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetCrackUrlA
InternetGetConnectedState
HttpOpenRequestA
rpcrt4
UuidToStringA
UuidCreate
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
VirtualProtect
TlsAlloc
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
RaiseException
InitializeCriticalSection
SetThreadLocale
GetThreadLocale
lstrlenW
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
GetModuleHandleW
lstrlenA
MultiByteToWideChar
GetLastError
FreeLibrary
SizeofResource
LoadResource
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetCurrentThreadId
HeapAlloc
GetProcessHeap
CreateThread
lstrcpynA
GetTickCount
lstrcmpA
TlsSetValue
TlsGetValue
CloseHandle
ReleaseMutex
lstrcpyA
WaitForSingleObject
CreateMutexA
Sleep
GetCurrentProcessId
HeapReAlloc
GetVersionExA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetLocaleInfoA
FindResourceA
GetACP
GetCPInfo
GetStdHandle
WriteFile
HeapDestroy
HeapCreate
VirtualFree
ExitProcess
HeapSize
SetLastError
TlsFree
IsDebuggerPresent
SetUnhandledExceptionFilter
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
user32
CharNextA
CharNextW
KillTimer
SetTimer
SendMessageA
FindWindowA
advapi32
RegDeleteKeyA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegQueryInfoKeyA
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoTaskMemFree
oleaut32
LoadRegTypeLi
VarUI4FromStr
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
RegisterTypeLi
SysFreeString
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ