msadcf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b0097566fcce0e6fb381e885b542cffd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b0097566fcce0e6fb381e885b542cffd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b0097566fcce0e6fb381e885b542cffd_JaffaCakes118
-
Size
67KB
-
MD5
b0097566fcce0e6fb381e885b542cffd
-
SHA1
4251b2ab0db005a6004b2bfc3c9ad40df87c2583
-
SHA256
2d6892a0232737bf6addcc2db6eba88c34ec7eed7ed4f4b5a7988a7a5c7e64b8
-
SHA512
fef401f7ff0edd1a552f40e081bca3d987061eeff120c3d4f44449d70718914a8ef47205fc12407146b4d0fa98624e93578a30d640b6a9f75e1f4bb2fe4dbeeb
-
SSDEEP
768:57K9+MgHBsGllGZQTF8+Lr+03mW8xosGhG49MOkbv48zrrDZrZpuGt3CBSM/HXXi:5wI6ClGZy8G92bv48rprZpueOHHvANR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0097566fcce0e6fb381e885b542cffd_JaffaCakes118
Files
-
b0097566fcce0e6fb381e885b542cffd_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
0691554d180ff32264bae60dae7436e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
wcscmp
tolower
?terminate@@YAXXZ
_CxxThrowException
__CxxFrameHandler
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
mbstowcs
wcsstr
_snwprintf
wcsncpy
wcsrchr
wcstol
_wcsicmp
wcschr
_wcsnicmp
_except_handler3
_purecall
free
malloc
wcslen
wcscpy
wcscat
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
SetUnhandledExceptionFilter
GetCurrentProcess
GetTickCount
QueryPerformanceCounter
GlobalSize
GlobalLock
GlobalUnlock
GetCurrentThreadId
CompareStringA
GetUserDefaultLCID
FreeLibrary
GetProcAddress
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
UnhandledExceptionFilter
advapi32
RegCloseKey
ole32
GetHGlobalFromStream
CLSIDFromProgID
StringFromIID
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoGetMalloc
CreateStreamOnHGlobal
oleaut32
SafeArrayPtrOfIndex
SafeArrayGetLBound
SafeArrayGetUBound
DispGetParam
SafeArrayDestroy
GetErrorInfo
CreateErrorInfo
LoadRegTypeLi
SafeArrayCreateVector
SafeArrayLock
SafeArrayUnlock
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VariantClear
SetErrorInfo
SysStringLen
SysAllocStringLen
VariantInit
SafeArrayGetDim
msdart
RegCreateKeyI
RegQueryValueExI
RegSetValueExI
RegOpenKeyI
GetVersionExI
GetModuleFileNameI
RegCreateKeyExI
RegOpenKeyExI
LoadLibraryI
RegDeleteKeyI
RegEnumKeyExI
LoadStringI
_LoadVersionedResourceEx@16
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ