d:\LocalSvnForDailyBuild\lonely_uk\bin\release\General.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d311143480d5852f7c9bd1dc5b88857e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d311143480d5852f7c9bd1dc5b88857e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d311143480d5852f7c9bd1dc5b88857e_JaffaCakes118
-
Size
1.4MB
-
MD5
d311143480d5852f7c9bd1dc5b88857e
-
SHA1
a92693d1a01005b77836c243c5fa6f75db6aa0a4
-
SHA256
40eae96b59c02f3627e5fe1b096090a567fe791071af4fdf4b22578a69afb774
-
SHA512
c7e3fe01fec6115fef3d02594313763066976fe2063da460c596b21ee3ec6b9ce2c8cd98b510ae3e1224431176fc282c2045b86e2f291679d38291f9a2fe190a
-
SSDEEP
24576:tJaZtFmow/iZf0z6Ri6SsCQnDaxvu2dVTNqq2:emlv2FsuuVT72
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d311143480d5852f7c9bd1dc5b88857e_JaffaCakes118
Files
-
d311143480d5852f7c9bd1dc5b88857e_JaffaCakes118.dll windows:4 windows x86 arch:x86
c3f1e265ac921605240d52d76d8de8b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
dbghelp
StackWalk
SymGetSymFromAddr
SymGetLineFromAddr
SymLoadModule
SymGetModuleInfo
SymInitialize
SymFunctionTableAccess
psapi
GetModuleInformation
log4cplus
?getInstance@Logger@log4cplus@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetParentHWnd@logWndAppender@log4cplus@@SAXPAUHWND__@@@Z
?doConfigure@PropertyConfigurator@log4cplus@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVHierarchy@2@I@Z
?getDefaultHierarchy@Logger@log4cplus@@SAAAVHierarchy@2@XZ
??6@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@AAV01@PBD@Z
??1?$SharedObjectPtr@VAppender@log4cplus@@@helpers@log4cplus@@QAE@XZ
??0?$SharedObjectPtr@VAppender@log4cplus@@@helpers@log4cplus@@QAE@ABV012@@Z
?formatAndAppend@PatternLayout@log4cplus@@UAEXAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@ABVInternalLoggingEvent@spi@2@@Z
??1PatternLayout@log4cplus@@UAE@XZ
??0PatternLayout@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getLayout@Appender@log4cplus@@UAEPAVLayout@2@XZ
??_DFileAppender@log4cplus@@QAEXXZ
?setLayout@Appender@log4cplus@@UAEXV?$auto_ptr@VLayout@log4cplus@@@std@@@Z
?getErrorHandler@Appender@log4cplus@@UAEPAVErrorHandler@2@XZ
?setErrorHandler@Appender@log4cplus@@UAEXV?$auto_ptr@VErrorHandler@log4cplus@@@std@@@Z
?setName@Appender@log4cplus@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getName@Appender@log4cplus@@UAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?append@FileAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?close@FileAppender@log4cplus@@UAEXXZ
??0FileAppender@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H_N@Z
??0?$SharedObjectPtr@VAppender@log4cplus@@@helpers@log4cplus@@QAE@PAVAppender@2@@Z
??1Logger@log4cplus@@UAE@XZ
?isEnabledFor@Logger@log4cplus@@QBE_NH@Z
?forcedLog@Logger@log4cplus@@QBEXHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH@Z
ws2_32
WSAGetLastError
inet_ntoa
bind
ioctlsocket
recv
WSACleanup
send
select
htonl
htons
inet_addr
closesocket
accept
connect
__WSAFDIsSet
WSAStartup
sendto
socket
listen
shutdown
gethostbyname
gethostbyaddr
ntohs
kernel32
GetFileSize
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
lstrlenA
GetProcessVersion
Sleep
CreateFileMappingA
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
lstrcatA
lstrcpyA
GetVersionExA
GetModuleHandleW
lstrcmpW
SetLastError
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GlobalAlloc
GlobalLock
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
LocalFree
FormatMessageW
GlobalUnlock
GlobalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
DeleteCriticalSection
GlobalHandle
LocalReAlloc
SetErrorMode
GlobalFlags
WritePrivateProfileStringW
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
FindClose
GetVolumeInformationW
GetFullPathNameW
CreateFileW
GetFileAttributesW
GetFileTime
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
GetFileAttributesA
GetCommandLineA
GetProcessHeap
ExitProcess
RtlUnwind
RaiseException
WriteConsoleW
GetFileType
GetStdHandle
ExitThread
CreateThread
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
MoveFileA
DeleteFileA
HeapSize
SetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStartupInfoA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualProtect
VirtualProtectEx
ReadProcessMemory
VirtualAllocEx
WriteProcessMemory
Module32FirstW
Module32NextW
IsBadReadPtr
ResumeThread
CreateToolhelp32Snapshot
Thread32First
OpenThread
SuspendThread
Thread32Next
GetVersion
OpenProcess
WaitForSingleObject
TerminateProcess
VirtualQuery
GetCurrentThread
GetModuleFileNameA
GetThreadContext
VirtualQueryEx
GetCurrentProcess
GetCurrentThreadId
InterlockedIncrement
OutputDebugStringA
InterlockedDecrement
GetPrivateProfileStringW
GetPrivateProfileIntW
FindFirstFileW
FreeLibrary
FindNextFileW
FindResourceExW
CloseHandle
CreateFileA
GetVersionExW
DeviceIoControl
CreateDirectoryA
GetModuleFileNameW
GetLastError
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
GetProcAddress
LoadLibraryW
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleHandleA
GetCurrentProcessId
OutputDebugStringW
GetTickCount
InterlockedCompareExchange
ReleaseMutex
GlobalMemoryStatus
GetLocalTime
FindFirstFileA
FindNextFileA
IsProcessorFeaturePresent
GlobalReAlloc
user32
UnregisterClassW
ClientToScreen
DestroyMenu
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetSysColorBrush
LoadCursorW
CharUpperW
ReleaseDC
GetDC
SetCursor
GetMessageW
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
IsWindowEnabled
ShowWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetParent
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetWindowTextW
SetWindowTextW
EnumChildWindows
MessageBoxA
EnumWindows
GetClassNameW
GetWindowThreadProcessId
IsWindow
GetClientRect
PostMessageW
SendMessageW
EnableWindow
MessageBoxW
CloseWindow
KillTimer
SetTimer
IsIconic
UnregisterClassA
SetClassLongA
LoadCursorA
LoadIconA
SetWindowTextA
GetWindowLongA
SetWindowLongA
DrawTextA
gdi32
GetDeviceCaps
DeleteObject
CreateCompatibleDC
ExtTextOutW
SaveDC
RestoreDC
SetBkMode
SetMapMode
PtVisible
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
CreateBitmap
CreateFontIndirectA
CreateDIBSection
DeleteDC
SetBkColor
SetTextColor
ScaleWindowExtEx
GetClipBox
GetStockObject
TextOutW
RectVisible
SetWindowExtEx
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
ReportEventA
RegisterEventSourceA
RegSetValueExA
RegCreateKeyExA
DeregisterEventSource
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteA
SHFileOperationA
shlwapi
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
oleaut32
VariantTimeToSystemTime
VariantInit
VariantClear
VariantChangeType
SystemTimeToVariantTime
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
d3d8
Direct3DCreate8
wininet
InternetQueryDataAvailable
HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
HttpAddRequestHeadersW
HttpQueryInfoW
InternetSetStatusCallbackW
InternetCloseHandle
InternetOpenW
InternetGetLastResponseInfoW
Exports
Exports
GetShareData
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ