d:\LocalSvnForDailyBuild\lonely_pl\bin\pl_release\General.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8944c37c800ad0b64dd46ea06d566c83_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8944c37c800ad0b64dd46ea06d566c83_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8944c37c800ad0b64dd46ea06d566c83_JaffaCakes118
-
Size
1.7MB
-
MD5
8944c37c800ad0b64dd46ea06d566c83
-
SHA1
77c8b35f1ed9aa07f91262e8c0df915ad1672e71
-
SHA256
45fa61b812d8a4dbce5d3107e5a73ec3a78e430468043f712d6fe96f85422487
-
SHA512
50e68e3942a29e8e73a2f1d1dfde1113b65eadefe044003ed5f12f25e6338537e61fefba2bfb68306eb51460bfb13764e9e59b4bca04387efbad3033ffff0600
-
SSDEEP
24576:gwitX6j0H8glHuc8lgL8DbXcOY/Tkhwq9iSYXTnMP+XccVEGG:U0A17g/ITU9iDTW7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8944c37c800ad0b64dd46ea06d566c83_JaffaCakes118
Files
-
8944c37c800ad0b64dd46ea06d566c83_JaffaCakes118.dll windows:4 windows x86 arch:x86
cd84d18d2b90eee7b3e19200f094666a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
dbghelp
SymFunctionTableAccess
SymGetSymFromAddr
SymGetLineFromAddr
SymLoadModule
SymGetModuleInfo
SymInitialize
StackWalk
psapi
GetModuleInformation
log4cplus
?getInstance@Logger@log4cplus@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetParentHWnd@logWndAppender@log4cplus@@SAXPAUHWND__@@@Z
?doConfigure@PropertyConfigurator@log4cplus@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVHierarchy@2@I@Z
?getDefaultHierarchy@Logger@log4cplus@@SAAAVHierarchy@2@XZ
??6@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@AAV01@PBD@Z
??1?$SharedObjectPtr@VAppender@log4cplus@@@helpers@log4cplus@@QAE@XZ
??0?$SharedObjectPtr@VAppender@log4cplus@@@helpers@log4cplus@@QAE@ABV012@@Z
??0?$SharedObjectPtr@VAppender@log4cplus@@@helpers@log4cplus@@QAE@PAVAppender@2@@Z
??1PatternLayout@log4cplus@@UAE@XZ
??0PatternLayout@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??_DFileAppender@log4cplus@@QAEXXZ
?getLayout@Appender@log4cplus@@UAEPAVLayout@2@XZ
?setLayout@Appender@log4cplus@@UAEXV?$auto_ptr@VLayout@log4cplus@@@std@@@Z
?getErrorHandler@Appender@log4cplus@@UAEPAVErrorHandler@2@XZ
?setErrorHandler@Appender@log4cplus@@UAEXV?$auto_ptr@VErrorHandler@log4cplus@@@std@@@Z
?setName@Appender@log4cplus@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getName@Appender@log4cplus@@UAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?append@FileAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?close@FileAppender@log4cplus@@UAEXXZ
??0FileAppender@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H_N@Z
?formatAndAppend@PatternLayout@log4cplus@@UAEXAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@ABVInternalLoggingEvent@spi@2@@Z
??1Logger@log4cplus@@UAE@XZ
?isEnabledFor@Logger@log4cplus@@QBE_NH@Z
?forcedLog@Logger@log4cplus@@QBEXHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH@Z
ws2_32
connect
accept
WSAStartup
__WSAFDIsSet
socket
WSAGetLastError
inet_ntoa
bind
ioctlsocket
ntohs
recv
WSACleanup
send
select
htonl
htons
sendto
inet_addr
closesocket
listen
shutdown
gethostbyaddr
gethostbyname
kernel32
GetFileSize
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
lstrlenA
GetProcessVersion
Sleep
CreateFileMappingA
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
lstrcatA
lstrcpyA
GlobalAlloc
lstrcmpW
GlobalLock
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GlobalDeleteAtom
GlobalAddAtomW
SetLastError
GetVersionExA
LoadLibraryA
CompareStringW
GlobalFindAtomW
LocalFree
FormatMessageW
GlobalUnlock
GlobalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
DeleteCriticalSection
GlobalHandle
LocalReAlloc
SetErrorMode
GlobalFlags
WritePrivateProfileStringW
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
FindClose
GetVolumeInformationW
GetFullPathNameW
CreateFileW
GetFileAttributesW
GetFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
GetFileAttributesA
GetCommandLineA
GetProcessHeap
ExitProcess
RtlUnwind
RaiseException
WriteConsoleW
GetFileType
GetStdHandle
ExitThread
CreateThread
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
MoveFileA
DeleteFileA
HeapSize
SetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
VirtualProtect
VirtualProtectEx
ReadProcessMemory
VirtualAllocEx
WriteProcessMemory
Module32FirstW
Module32NextW
IsBadReadPtr
ResumeThread
CreateToolhelp32Snapshot
Thread32First
OpenThread
SuspendThread
Thread32Next
GetVersion
OpenProcess
WaitForSingleObject
TerminateProcess
VirtualQuery
GetModuleFileNameA
GetThreadContext
VirtualQueryEx
GetCurrentThread
GetCurrentProcess
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
GetPrivateProfileStringW
GetPrivateProfileIntW
FindNextFileW
FindFirstFileW
FindResourceExW
CloseHandle
CreateFileA
GetVersionExW
DeviceIoControl
OutputDebugStringA
CreateDirectoryA
GetModuleFileNameW
GetLastError
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
LockResource
SizeofResource
LoadResource
FindResourceW
GetCurrentProcessId
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleHandleA
GetTickCount
InterlockedCompareExchange
ReleaseMutex
GlobalMemoryStatus
GetLocalTime
FindFirstFileA
FindNextFileA
IsProcessorFeaturePresent
GlobalReAlloc
user32
UnregisterClassW
ClientToScreen
GetSysColorBrush
LoadCursorW
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
CharUpperW
DestroyMenu
ReleaseDC
GetDC
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
SetWindowPos
SetFocus
ShowWindow
SetWindowLongW
GetDlgCtrlID
GetDlgItem
GetWindow
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
PostQuitMessage
SetMenuItemBitmaps
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetWindowTextW
SetWindowTextW
EnumChildWindows
MessageBoxA
EnumWindows
GetClassNameW
GetWindowThreadProcessId
IsWindow
GetClientRect
EnableWindow
SendMessageW
PostMessageW
KillTimer
SetTimer
MessageBoxW
CloseWindow
IsIconic
UnregisterClassA
LoadCursorA
LoadIconA
SetWindowTextA
SetClassLongA
GetWindowLongA
SetWindowLongA
DrawTextA
GetMenuCheckMarkDimensions
gdi32
DeleteObject
SaveDC
RestoreDC
SetBkMode
SetMapMode
PtVisible
TextOutW
ExtTextOutW
Escape
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetDeviceCaps
CreateFontIndirectA
CreateDIBSection
SetBkColor
CreateCompatibleDC
SetTextColor
GetClipBox
DeleteDC
CreateBitmap
RectVisible
GetStockObject
SetViewportOrgEx
SelectObject
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
ReportEventA
RegisterEventSourceA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
DeregisterEventSource
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
SHFileOperationA
ShellExecuteA
shlwapi
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
oleaut32
VariantClear
VariantTimeToSystemTime
VariantChangeType
VariantInit
SystemTimeToVariantTime
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
d3d8
Direct3DCreate8
wininet
InternetQueryDataAvailable
HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
HttpAddRequestHeadersW
InternetSetFilePointer
InternetSetStatusCallbackW
HttpQueryInfoW
InternetCloseHandle
InternetOpenW
InternetGetLastResponseInfoW
Exports
Exports
GetShareData
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 660KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ