C:\build\source\rpplylst\rel32\rpplylst.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8258fe8bd5da3620c8afefd2fa7a1110_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8258fe8bd5da3620c8afefd2fa7a1110_JaffaCakes118.dll
Resource
win10v2004-20240730-en
General
-
Target
8258fe8bd5da3620c8afefd2fa7a1110_JaffaCakes118
-
Size
355KB
-
MD5
8258fe8bd5da3620c8afefd2fa7a1110
-
SHA1
0e2240fc36a728277300476fdf4316a2e2ea3519
-
SHA256
8bd6ff67a1aed1e703230d7845d745fb4a5ddfab1e560023d9d0b6dd9cd8bbb0
-
SHA512
351ee4b9653b33290ec5402f41429af2a2ce7d6c5b7200bc006fa0c0cc790f5e0903080ce3a023e75b62596a47b7f640ef683fb6155bdfa75282c93cf74c78d1
-
SSDEEP
6144:vfoKjzAjnaGuYnhrRQHmdcOem2zlcTLVb/vTf74kKmDo2xqYCjhhck4XtJdYQBOx:4KjzLYn1BVbnQkKmrqe8hMbLe77Nf6i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8258fe8bd5da3620c8afefd2fa7a1110_JaffaCakes118
Files
-
8258fe8bd5da3620c8afefd2fa7a1110_JaffaCakes118.dll windows:5 windows x86 arch:x86
57a8e4ff6f61d886dc81f68a527dc381
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
pngu3267
??0CPNBrowseDialog@@QAE@PAVCPNWindow@@@Z
?DoModal@CPNBrowseDialog@@UAEKXZ
?GetPNWindow@CPNWindow@@SAPAV1@PAX@Z
??0CPNWindow@@QAE@XZ
?Attach@CPNWindow@@QAEXPAUHWND__@@@Z
?DoModal@CPNMessageBox@@UAEKPAVCPNWindow@@PBD1K@Z
??1CPNDialog@@UAE@XZ
?SetSingleInstance@CPNDialog@@UAEXH@Z
?GetDefaultButtonId@CPNDialog@@UBEKXZ
?SetDefaultButtonId@CPNDialog@@UAEXK@Z
?GetTemplateId@XPNDialog@@UBEKXZ
?GetSingleInstanceId@XPNDialog@@UAEKXZ
?PostDomodal@XPNDialog@@UAEXPAVCPNWindow@@@Z
?PreDomodal@XPNDialog@@UAEXPAVCPNWindow@@@Z
?EndDialog@CPNDialog@@UAEXK@Z
?InitDialog@CPNDialog@@UAEHXZ
?DoModaless@CPNDialog@@UAEKXZ
?DoModeless@CPNDialog@@UAEKXZ
?DoModal@CPNDialog@@UAEKXZ
?Create@CPNDialog@@UAEHKPAVCPNWindow@@@Z
?OnWndMsg@CPNWindow@@UAEHKIJPAJ@Z
?ParentPaintBackground@XPNWindow@@MAEHPAVCPNDC@@PAVCPNxRect@@@Z
?ShouldDrawFocus@CPNWindow@@MAEHXZ
?UpdateShowStateIfMinimized@CPNWindow@@UAEXXZ
?EnableToolTips@CPNWindow@@UAEXH@Z
?RemoveAllToolTips@CPNWindow@@UAEXXZ
?AddToolTip@CPNWindow@@UAEHAAVCPNxRect@@PBD@Z
?AddToolTip@CPNWindow@@UAEHPBD@Z
?IsPtInWindow@XPNWindow@@UBEHABVCPNxPoint@@@Z
?SetIcon@CPNWindow@@UAEXAAVCPNIcon@@H@Z
?MapCoordinatesTo@CPNWindow@@UBEXPAV1@AAVCPNxPoint@@@Z
?MapCoordinatesTo@CPNWindow@@UBEXPAV1@AAVCPNxRect@@@Z
?Create@CPNWindow@@UAEHPAV1@JJJJKPBD@Z
?OnEvent@XPNDialog@@UAEHAAVCPNEvent@@@Z
??BCPNWindow@@UBE?BU_PNxWindow@@XZ
?GetPNxWindowID@CPNWindow@@UBEPAXXZ
?SubclassWnd@CPNWindow@@UAEHPAU_PNxWindow@@@Z
?Detach@CPNWindow@@UAEXXZ
?Attach@CPNWindow@@UAEXPAX@Z
?Attach@CPNWindow@@UAEXABU_PNxWindow@@@Z
?DetachWindowItem@CPNWindow@@UAEXXZ
?AttachWindowItem@CPNWindow@@UAEHKPAV1@@Z
?GetMenu@CPNWindow@@UAEHAAVCPNMenu@@@Z
?IsEnabled@CPNWindow@@UBEHXZ
?Enable@CPNWindow@@UAEXH@Z
?SetForegroundWindow@CPNWindow@@UAEXHK@Z
?GetShowState@CPNWindow@@UBEJXZ
?SetShowState@CPNWindow@@UAEXJ@Z
?IsShown@CPNWindow@@UBEHXZ
?Show@CPNWindow@@UAEHH@Z
?HasFocus@CPNWindow@@UBEHXZ
?SetFocus@CPNWindow@@UAEHXZ
?HasCapture@CPNWindow@@UBEHXZ
?ReleaseCapture@CPNWindow@@UAEXXZ
?SetCapture@CPNWindow@@UAEXXZ
?ValidateRect@CPNWindow@@UAEXPBVCPNxRect@@@Z
?RedrawWindow@CPNWindow@@UAEXXZ
?RepaintRect@CPNWindow@@UAEXPBVCPNxRect@@H@Z
?ResumeUpdates@CPNWindow@@UAEXXZ
?HasPausedUpdates@CPNWindow@@UBEHXZ
?PauseUpdates@CPNWindow@@UAEXXZ
?ScreenToClient@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?ScreenToClient@CPNWindow@@UBEXAAVCPNxRect@@@Z
?ClientToScreen@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?ClientToScreen@CPNWindow@@UBEXAAVCPNxRect@@@Z
?MoveAndSize@CPNWindow@@UAEXABU_PNxPoint@@ABU_PNxSize@@@Z
?MoveAndSize@CPNWindow@@UAEXABU_PNxRect@@@Z
?GetPosition@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?ScrollWindow@CPNWindow@@UAEXJJPAVCPNxRect@@K@Z
?Center@CPNWindow@@UAEXXZ
?Move@CPNWindow@@UAEXABVCPNxPoint@@@Z
?GetScreenRect@CPNWindow@@UBEXAAVCPNxRect@@@Z
?GetClientRect@CPNWindow@@UBEXAAVCPNxRect@@@Z
?GetSize@CPNWindow@@UBEXAAVCPNxSize@@@Z
?SetSize@CPNWindow@@UAEXABVCPNxSize@@@Z
?GetFont@CPNWindow@@UBEPAVCPNFont@@XZ
?SetFont@CPNWindow@@UAEXPAVCPNFont@@H@Z
?GetTitleLength@CPNWindow@@UBEJXZ
?GetTitle@CPNWindow@@UBEXPADJ@Z
?SetTitle@CPNWindow@@UAEXPBD@Z
?SetZOrderPosition@CPNWindow@@UAEXK@Z
?SetParent@CPNWindow@@UAEXPAV1@@Z
?GetParent@CPNWindow@@UBEPAV1@XZ
?IsValid@CPNWindow@@UBEHXZ
?Destroy@CPNDialog@@UAEXXZ
?HandleEvent@CPNWindow@@UAEXAAVCPNEvent@@@Z
?NotifyObservers@CPNRouter@@UAEXAAVCPNEvent@@@Z
??0CPNDialog@@QAE@XZ
ole32
RegisterDragDrop
OleInitialize
OleUninitialize
DoDragDrop
RevokeDragDrop
kernel32
HeapFree
HeapAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetProcessHeap
UnhandledExceptionFilter
FindFirstFileW
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
LoadLibraryA
CompareStringA
GetDriveTypeA
GetPrivateProfileStringA
SetEvent
CloseHandle
WaitForSingleObject
CreateThread
CreateEventA
TerminateThread
OutputDebugStringA
Sleep
lstrlenA
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
MulDiv
MultiByteToWideChar
IsDBCSLeadByte
lstrcpynA
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetVersionExA
GlobalSize
WideCharToMultiByte
GetModuleFileNameA
lstrcpyA
GetCurrentProcessId
FindClose
GetFileAttributesA
GetTickCount
SetErrorMode
GetLocaleInfoA
SetLocaleInfoA
GetNumberFormatA
user32
SetRect
RedrawWindow
CharLowerA
SystemParametersInfoA
MapWindowPoints
IsRectEmpty
EnableWindow
TranslateMessage
DispatchMessageA
SetWindowTextA
SetWindowPos
CreateWindowExA
SetWindowLongA
CallWindowProcA
GetClipboardData
EmptyClipboard
SetClipboardData
GetActiveWindow
OpenClipboard
EnumClipboardFormats
CloseClipboard
GetDoubleClickTime
SetTimer
GetDlgItem
RegisterClipboardFormatA
ShowWindow
CharNextA
KillTimer
GetWindowLongA
SetFocus
UnhookWindowsHookEx
SetWindowsHookExA
GetSubMenu
EnableMenuItem
ClientToScreen
TrackPopupMenu
DestroyMenu
ScreenToClient
GetSystemMetrics
wsprintfA
GetDC
ReleaseDC
DrawFocusRect
UpdateWindow
PostThreadMessageA
PeekMessageA
GetMessageA
PostMessageA
CallNextHookEx
PtInRect
WindowFromPoint
DialogBoxParamA
EndDialog
GetDlgItemTextA
MessageBoxA
SendDlgItemMessageA
GetParent
LockWindowUpdate
ReleaseCapture
SetCapture
GetClientRect
GetWindowRect
GetSysColorBrush
GetScrollPos
FillRect
GetFocus
GetSysColor
SendMessageA
LoadCursorA
SetCursor
CharPrevA
GetKeyState
IsWindowEnabled
advapi32
RegQueryValueExA
RegCloseKey
IsTextUnicode
RegOpenKeyExA
RegQueryInfoKeyA
shell32
SHGetFolderPathA
gdi32
SetTextColor
SetBkMode
SetPixel
DeleteObject
GetCurrentObject
GetPixel
Rectangle
GetStockObject
SelectObject
CreatePen
GetTextExtentPointA
CreateDIBitmap
CreateFontIndirectA
GetDeviceCaps
GetObjectA
SetBkColor
CreateSolidBrush
GetTextExtentPoint32A
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
ExtTextOutA
GetBkColor
comctl32
ord17
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_Create
ImageList_Draw
ImageList_Destroy
winmm
timeGetTime
msvcr90
fprintf
fopen
memcpy
strrchr
strncpy
sscanf
calloc
_stricmp
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
isspace
_snprintf
_strdup
strtok
free
atol
atof
mblen
realloc
_splitpath
strncmp
_atoi64
tolower
??2@YAPAXI@Z
memset
_purecall
_time32
??_U@YAPAXI@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
strstr
strchr
??3@YAXPAX@Z
__CxxFrameHandler3
rand
fclose
_vsnprintf
strtol
isdigit
strtod
_stat32
_ismbblead
printf
wcstok
_wcsdup
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
malloc
_strlwr
srand
??_V@YAXPAX@Z
sprintf
atoi
_strnicmp
_putenv
_itoa
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
Exports
Exports
RMACreateInstance
RMAShutdown
SetDLLAccessPath
Sections
.text Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE