c:\DailyBuild\sources\Nero7_OCTANE_RELEASE\Nero\bin\Release MultiByte\ImageGen.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b900aa2789a39ad5d2a10d959134bb97_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b900aa2789a39ad5d2a10d959134bb97_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b900aa2789a39ad5d2a10d959134bb97_JaffaCakes118
-
Size
209KB
-
MD5
b900aa2789a39ad5d2a10d959134bb97
-
SHA1
ba368853040dd40c2e8db753e27d589eeccf535c
-
SHA256
572f22e3e780058138c0fa43bc627072603c189ce6e9436efef002ad322880e1
-
SHA512
e1256a2808d252679dd42f684ac11edbed4f33e20753a168c1cc045f2a215280a28fa62e2ad42c5977e3a6c1fecc5cc35466d7fe4623f374ce511c3dc510f121
-
SSDEEP
6144:3RzVjKP6hecXUnOCHHc0ysWzIjNFWX/IGT/VP:hzQ6PUnOCHHc0kUqvIG9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b900aa2789a39ad5d2a10d959134bb97_JaffaCakes118
Files
-
b900aa2789a39ad5d2a10d959134bb97_JaffaCakes118.dll windows:4 windows x86 arch:x86
dc4732c1349e99447ca842b7757cc20f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
neroerr
?GetLine@CNeroError@@UBEHXZ
?GetErrorFile@CNeroError@@UBEPBDXZ
?GetError@CNeroError@@UBEHXZ
?GetTime@CNeroError@@UBEJXZ
?GetErrorIcon@CNeroError@@UBE?AW4NeroErrorID@@XZ
?SetFatal@CNeroError@@UAEHH@Z
?Fatal@CNeroError@@UBEHXZ
?GetDescriptionLine@CNeroError@@UBEHHHPADH_N@Z
?GetDescriptionLine@CNeroError@@UBEHHHPADH@Z
??0CErrorClone@@QAE@ABV0@@Z
??0CNeroError@@IAE@PBDHH@Z
?EnableMessageTranslation@CNeroError@@UAEXH@Z
?IsMessageTranslationEnabled@CNeroError@@UBEHXZ
?GetThreadName@CNeroError@@UBEPBDXZ
??1CErrorClone@@UAE@XZ
?GetDescriptionLine@CNeroError@@UBEHHPADH@Z
??1CNeroErrorList@@UAE@XZ
??1CNeroError@@UAE@XZ
?ERRAdd@@YAABVINeroError@@ABV1@@Z
msvcp71
?_Nomemory@std@@YAXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?is@?$ctype@G@std@@QBE_NFG@Z
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Register@facet@locale@std@@QAEXXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??Bid@locale@std@@QAEIXZ
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?id@?$ctype@G@std@@2V0locale@2@A
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?clear@ios_base@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
msvcr71
memcmp
__dllonexit
__CppXcptFilter
_adjust_fdiv
_initterm
free
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler3
__security_error_handler
_callnewh
memset
??0exception@@QAE@ABV0@@Z
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
__CxxFrameHandler
_CxxThrowException
_purecall
??3@YAXPAX@Z
??_V@YAXPAX@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
strlen
_snprintf
sprintf
malloc
strcpy
strncpy
strcat
memmove
memcpy
_onexit
kernel32
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
Exports
Exports
??0CNeroError@@QAE@ABV0@@Z
??0CNeroErrorList@@AAE@ABV0@@Z
??0INeroError@@QAE@ABV0@@Z
??0INeroError@@QAE@XZ
??1INeroError@@UAE@XZ
??4CNeroError@@QAEAAV0@ABV0@@Z
??4CNeroErrorList@@QAEAAV0@ABV0@@Z
??4INeroError@@QAEAAV0@ABV0@@Z
??_7CNeroError@@6B@
??_7CNeroErrorList@@6B@
??_7INeroError@@6B@
?CloseGenerator@@YAXPAVCGenerator@@@Z
?GetOrdinalNumber@CNeroError@@UBE?AVCOrdinalNumber@@XZ
OpenGenerator
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ