browsewm.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8cdeb85333c44e2ee02ff65dd930fdf8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8cdeb85333c44e2ee02ff65dd930fdf8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8cdeb85333c44e2ee02ff65dd930fdf8_JaffaCakes118
-
Size
76KB
-
MD5
8cdeb85333c44e2ee02ff65dd930fdf8
-
SHA1
df15f3d9944fe97a080002c5bff9fffbd10ee9e3
-
SHA256
62ecaedf8c3b6e62e20d03e005ec1c180b1ba4505742025a68f33d16fd410677
-
SHA512
9cab19d45cacd867d589aa8c341595c229a1ca2e1364a0451037e8f4f7aac99e769f570b94d7a3b4fa5dec3f61d6ff802889c5e9e7225fad8a24f63944d3e9e8
-
SSDEEP
1536:XyXdL3pGa/fTf372wwaHeu75YH8TJSu3E7D:X6ddG6fTv7AaHe2ECSu3Ev
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cdeb85333c44e2ee02ff65dd930fdf8_JaffaCakes118
Files
-
8cdeb85333c44e2ee02ff65dd930fdf8_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
509dc2485c885c39b0faba5a5f4ae861
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
free
_ftol
_purecall
malloc
realloc
memmove
_except_handler3
_initterm
_adjust_fdiv
_HUGE
kernel32
GlobalFree
GlobalHandle
GlobalSize
GlobalReAlloc
HeapAlloc
HeapFree
VirtualAlloc
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcessHeap
GetProcAddress
LoadLibraryA
InterlockedIncrement
lstrlenA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
MultiByteToWideChar
GetLastError
HeapDestroy
lstrcatW
lstrcpynW
GlobalUnlock
GlobalLock
InterlockedDecrement
IsBadWritePtr
InitializeCriticalSection
GlobalAlloc
DeleteCriticalSection
DisableThreadLibraryCalls
lstrlenW
lstrcpyW
LoadResource
SizeofResource
FreeLibrary
user32
InvalidateRect
IsWindow
SetFocus
GetParent
GetDC
ReleaseDC
wsprintfW
ShowWindow
UnionRect
PtInRect
DestroyWindow
gdi32
LPtoDP
SetViewportOrgEx
DeleteDC
SaveDC
SetWindowOrgEx
RestoreDC
GetDeviceCaps
SetMapMode
advapi32
RegCloseKey
ole32
CoTaskMemFree
CoTaskMemAlloc
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CoTaskMemRealloc
CreateOleAdviseHolder
CoCreateInstance
oleaut32
SysFreeString
VariantInit
VariantClear
VariantCopy
SysAllocStringLen
SysStringLen
SysAllocString
LoadRegTypeLi
SetErrorInfo
RegisterTypeLi
LoadTypeLi
VarI4FromStr
OleCreatePropertyFrame
VariantChangeTypeEx
shlwapi
ord130
ord128
ord125
ord120
ord40
ord56
StrCmpIW
ord315
ord55
ord126
ord123
ord347
ord66
ord105
PathAppendW
ord121
ord102
ord314
ord141
ord48
ord80
ord37
winmm
timeGetTime
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ