VSConvertersPackage.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dfc546db6ebcab39490ce6443f2f8423_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dfc546db6ebcab39490ce6443f2f8423_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dfc546db6ebcab39490ce6443f2f8423_JaffaCakes118
-
Size
250KB
-
MD5
dfc546db6ebcab39490ce6443f2f8423
-
SHA1
610dd5a5ef54df7ad7e8f76d564437cb7dc68b04
-
SHA256
28ac2ee81188a2d0ff3e2d8afc374bcdf6ccc3debfe49d42add1494d54a12b15
-
SHA512
9fe615d0d98e6e54230a2455da5c66a5dd3c651cf6b57f0127bbf6e1ef87e0426551fd2a66bab30ed4dfd9165a008b7ea7a5e1665196cdbde927fa2ffe7341eb
-
SSDEEP
6144:ylPDV/w+Lsguk8qLoe7czso1T4T5QvK6tGNYrEZu1vX:y9h/kmX9UTM5OBtGuIZG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfc546db6ebcab39490ce6443f2f8423_JaffaCakes118
Files
-
dfc546db6ebcab39490ce6443f2f8423_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
9a335cd192ae08ed19cce0a889bd9c8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
oleaut32
SysAllocString
SysStringLen
LoadTypeLi
SafeArrayCreate
VariantInit
SysFreeString
VarUI4FromStr
RegisterTypeLi
SysAllocStringLen
ole32
CoTaskMemRealloc
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
kernel32
GetThreadLocale
LCMapStringW
LCMapStringA
FindResourceExW
FindResourceW
FreeLibrary
LoadResource
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
InitializeCriticalSection
SizeofResource
LeaveCriticalSection
GetModuleFileNameW
MultiByteToWideChar
lstrlenW
RaiseException
GetLastError
EnterCriticalSection
DisableThreadLibraryCalls
LockResource
lstrcmpiW
DeleteCriticalSection
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
WriteFile
HeapSize
InterlockedExchange
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
user32
CharNextW
UnregisterClassA
advapi32
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 175KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ