c:\fingerCountry\WearChick\PickCost\beganInterest\about.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d25ae574b646c1d997ff7ebbfc65576f_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
d25ae574b646c1d997ff7ebbfc65576f_JaffaCakes118
-
Size
512KB
-
MD5
d25ae574b646c1d997ff7ebbfc65576f
-
SHA1
8d27122e25aa34bc6b1c3ef6d3280477335b6645
-
SHA256
960c3a6f38511d19d3236eb972d57c7313e8f3b951998437f161a94673502f03
-
SHA512
842a638a09498284b684c89cbecf73ef343b497abe799665e05aec2be3fa1268d3afa54333d09f70b763c6d5501ed5119d9e77dcef804e05d62a153cd26f95dc
-
SSDEEP
12288:SLZB7rJ8smGtKlPKx8qJzFriZ1c4wjaMWEEbpjF:S7rILyx8sWZKZWEEljF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d25ae574b646c1d997ff7ebbfc65576f_JaffaCakes118
Files
-
d25ae574b646c1d997ff7ebbfc65576f_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
5cfb77f393117ef12c2d9ffc6efab22f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetTempPathA
Sleep
VirtualProtect
VirtualAlloc
VirtualFree
ResetEvent
CopyFileA
CreateMutexA
CreateDirectoryA
OpenMutexA
DeleteFileA
FindFirstChangeNotificationA
GetEnvironmentVariableA
PeekNamedPipe
DuplicateHandle
GetCurrentThread
GetLastError
HeapReAlloc
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
SetClipboardData
DestroyWindow
SendMessageA
IsClipboardFormatAvailable
SendDlgItemMessageA
CheckRadioButton
SetForegroundWindow
comdlg32
GetSaveFileNameA
CommDlgExtendedError
ChooseFontA
GetFileTitleA
ReplaceTextA
GetOpenFileNameA
comctl32
ImageList_SetOverlayImage
DestroyPropertySheetPage
ImageList_Add
CreateToolbarEx
ord6
ImageList_LoadImageA
ord17
Exports
Exports
Cornmoon
DllRegisterServer
Sections
.text Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ