c:\Downloads\Sira\WildMedia\midaddle\Release\midaddle.pdb
Static task
static1
Behavioral task
behavioral1
Sample
88e8784ba380dd8017cdd2622bfb6b75_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
88e8784ba380dd8017cdd2622bfb6b75_JaffaCakes118
-
Size
116KB
-
MD5
88e8784ba380dd8017cdd2622bfb6b75
-
SHA1
80687ebe3b6ef668fddf3940c0365f18eac4d79e
-
SHA256
add3427efa28ec774134cca65f2b4a3ba22bfc452b833ab903a314f0791c02dc
-
SHA512
0a59989405979e9a6591052d464077064bad6818b60131c0a612ab32dc75532eafc170aa342f2a1289e0cd873a611e10f589b455f5f9f198470e7942f7ec5d33
-
SSDEEP
1536:4i1a9UL8nuUYL3E2uwcMA2wkDcAkSJJbvYc2v+fW7w3UwGdWB3Y0HJI8lOf4Eo:4KL8nuUCuz2p1kSE4jY0HDlOgr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88e8784ba380dd8017cdd2622bfb6b75_JaffaCakes118
Files
-
88e8784ba380dd8017cdd2622bfb6b75_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
7f0a4015667ba76ca59110d4860b129f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
netapi32
Netbios
kernel32
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiA
lstrlenW
lstrlenA
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
WideCharToMultiByte
LeaveCriticalSection
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
FreeLibrary
LoadLibraryExA
GetModuleHandleA
GetVolumeInformationA
CloseHandle
FlushFileBuffers
SetStdHandle
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCPInfo
EnterCriticalSection
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
GetOEMCP
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
GetCurrentThreadId
GetCommandLineA
HeapCreate
VirtualFree
IsBadWritePtr
GetProcAddress
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
LCMapStringA
user32
CharNextA
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
shell32
SHGetFileInfoA
ole32
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
oleaut32
VarUI4FromStr
SysFreeString
SysStringLen
LoadRegTypeLi
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocStringLen
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
shlwapi
PathFindExtensionA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ