adsnt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
73ac1f16fcbdeb7f0cbfd3ce447d6705_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
73ac1f16fcbdeb7f0cbfd3ce447d6705_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
73ac1f16fcbdeb7f0cbfd3ce447d6705_JaffaCakes118
-
Size
251KB
-
MD5
73ac1f16fcbdeb7f0cbfd3ce447d6705
-
SHA1
2ed5dd615058c066f9dfdd56b10f2be9b8217e8f
-
SHA256
42e04d7d299887257c9c38f5c25155ef8a998a717a8b2d2b790bc9ee102359eb
-
SHA512
4bd0dddf56d0e065d004d3790f5dcff8572fef2d96044694057761e2f501cb790d24fc16d61dc07393716648326e4c8c9118c50c8c53f7a0418bc42fed86e75b
-
SSDEEP
6144:1JEMA7LCSK41tvfoKM4RLYIvAAZ7Evwd6g83qE:1Cb5daIv83qE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73ac1f16fcbdeb7f0cbfd3ce447d6705_JaffaCakes118
Files
-
73ac1f16fcbdeb7f0cbfd3ce447d6705_JaffaCakes118.dll windows:6 windows x86 arch:x86
7515fe48a606f00ce8c60e960952b16d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_wcsnicmp
_ftol2
wcsrchr
_CxxThrowException
_XcptFilter
malloc
free
_initterm
_amsg_exit
_adjust_fdiv
_except_handler4_common
_unlock
wcsncpy_s
__dllonexit
_lock
_onexit
wcsncat_s
swprintf_s
wcschr
_ltow
_wtol
_itow_s
wcscat_s
_purecall
wcscpy_s
memset
memcpy
_wcsicmp
ntdll
RtlRunEncodeUnicodeString
RtlInitUnicodeString
RtlRunDecodeUnicodeString
RtlSecondsSince1970ToTime
RtlTimeToSecondsSince1970
activeds
ord17
ord15
ord18
ord23
ord22
ord21
ord16
ord7
ord14
ole32
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CreatePointerMoniker
StringFromGUID2
CLSIDFromString
IIDFromString
advapi32
UnlockServiceDatabase
OpenServiceW
QueryServiceConfigW
OpenSCManagerW
CreateServiceW
CloseServiceHandle
GetSidIdentifierAuthority
GetSidSubAuthorityCount
ChangeServiceConfigW
GetLengthSid
RegConnectRegistryW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
SystemFunction041
LockServiceDatabase
QueryServiceStatus
StartServiceW
ControlService
LookupAccountNameW
EnumServicesStatusW
SystemFunction040
DeleteService
GetUserNameW
GetSidSubAuthority
winspool.drv
AddPrinterW
SetPrinterW
OpenPrinterW
EnumJobsW
SetJobW
ClosePrinter
GetPrinterW
EnumPrintersW
DeletePrinter
GetJobW
kernel32
InterlockedIncrement
GetLastError
SetLastError
SystemTimeToFileTime
GetSystemTime
CompareStringW
GetTickCount
FreeLibrary
DeleteCriticalSection
InterlockedDecrement
LocalFree
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
lstrlenW
InitializeCriticalSection
DisableThreadLibraryCalls
GetComputerNameW
SystemTimeToTzSpecificLocalTime
LoadLibraryW
GetSystemDirectoryW
GetProcAddress
FileTimeToSystemTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FormatMessageW
FileTimeToDosDateTime
DosDateTimeToFileTime
RaiseException
GetModuleHandleW
oleaut32
VariantCopy
VariantTimeToDosDateTime
DosDateTimeToVariantTime
VariantInit
VariantClear
DispGetIDsOfNames
LoadRegTypeLi
DispInvoke
SetErrorInfo
VariantTimeToSystemTime
SysFreeString
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
CreateErrorInfo
SystemTimeToVariantTime
netapi32
NetUserDel
I_NetNameCompare
NetFileEnum
NetFileGetInfo
NetShareEnum
NetShareAdd
NetShareGetInfo
NetShareDel
NetShareSetInfo
NetLocalGroupAdd
NetGroupGetUsers
NetGroupEnum
NetLocalGroupEnum
NetGetDCName
NetGetAnyDCName
NetWkstaGetInfo
NetUseGetInfo
NetWkstaUserGetInfo
NetLocalGroupGetMembers
NetSessionDel
NetGroupDel
NetSessionEnum
NetSessionGetInfo
NetServerSetInfo
NetLocalGroupGetInfo
NetGroupAdd
NetGroupDelUser
NetGroupAddUser
NetLocalGroupAddMembers
NetLocalGroupDelMembers
DsRoleGetPrimaryDomainInformation
DsRoleFreeMemory
NetUserGetLocalGroups
NetUserGetGroups
NetGroupGetInfo
NetUserChangePassword
NetUserAdd
NetServerGetInfo
NetLocalGroupSetInfo
NetGroupSetInfo
NetUserGetInfo
NetUserSetInfo
NetQueryDisplayInformation
NetUserModalsGet
NetUserModalsSet
NetApiBufferFree
NetServerEnum
NetLocalGroupDel
mpr
WNetCancelConnection2W
WNetAddConnection2W
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ