e:\bbbrrr\DirSize_source\DirSize\ReleaseMinSize\DirSize.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8291cbc6873e8019b6c0cb4472393d0f_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
8291cbc6873e8019b6c0cb4472393d0f_JaffaCakes118
-
Size
589KB
-
MD5
8291cbc6873e8019b6c0cb4472393d0f
-
SHA1
dcfcfd02bd709280e55ae8356ffa2f7744092e28
-
SHA256
e1c3eeb926cb6b2652dab8077a2ffcca6da1005423debe16e5ca1a4e1b5b5858
-
SHA512
c650cd9b2bca6003f9c5ef1904c828f926e43024ddcd31cc8a6cdaaee6fcf28847ed9bee1fcf0640471e8515180e71c19c6cb14220cbd5b446d7e16bcdc0085c
-
SSDEEP
12288:Ua35NNMyw08jsI525olVNyM+ptFzTphtaMww0PXMUiMM8:Ug5NNhw0UT525oLN6pt1Tph0Rv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8291cbc6873e8019b6c0cb4472393d0f_JaffaCakes118
Files
-
8291cbc6873e8019b6c0cb4472393d0f_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
95daca5802fc1a3dddaa23c9a8d1e835
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InterlockedDecrement
GetModuleHandleA
GetModuleFileNameA
RaiseException
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
InterlockedIncrement
DeleteCriticalSection
EnterCriticalSection
GetProcAddress
GetModuleHandleW
LeaveCriticalSection
InterlockedCompareExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
InitializeCriticalSection
ExitProcess
GetLastError
DisableThreadLibraryCalls
FindFirstFileA
FindNextFileA
FindClose
lstrlenW
WideCharToMultiByte
lstrlenA
IsDBCSLeadByte
MultiByteToWideChar
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
RtlUnwind
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
WriteFile
GetStdHandle
FatalAppExitA
VirtualFree
HeapReAlloc
HeapCreate
HeapDestroy
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
LoadLibraryA
GetLocaleInfoW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
ReadFile
user32
CharNextA
CharNextW
SendMessageA
advapi32
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
CryptAcquireContextW
CryptImportKey
CryptEncrypt
RegQueryInfoKeyA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 306KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ