c:\depot\Hitch\Dreamweaver\Targets\bin\contributeieplugin.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f70650bed0cf45e9adab1dcce63cb9d0_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
f70650bed0cf45e9adab1dcce63cb9d0_JaffaCakes118
-
Size
176KB
-
MD5
f70650bed0cf45e9adab1dcce63cb9d0
-
SHA1
50ccde8b0931192d51696942303c7df26419179b
-
SHA256
030e0fc4fab5a5d23dd883c8d9b74d78b88faf18f1b422856fe4828d094b2872
-
SHA512
91e11d5c39980f2e668649f5bb8faa6fc627ac90a89872c060d76f391d016345fcc8d34bf4c9556bb1657852ed98a070ccbf1d5908393f716e7c0fd376d730c6
-
SSDEEP
3072:/cE7U+0Up0V/iG1srOlHiTqJahoySCG9dbomOJKkG2a:/cF3/52rOlHkhQ2gka
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f70650bed0cf45e9adab1dcce63cb9d0_JaffaCakes118
Files
-
f70650bed0cf45e9adab1dcce63cb9d0_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
1b8cb1a4260aa78cef6afd6de5b75a5d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
comctl32
ImageList_Destroy
InitCommonControlsEx
ImageList_Create
ImageList_Add
uxtheme
CloseThemeData
DrawThemeBackground
DrawThemeParentBackground
OpenThemeData
kernel32
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
CreateDirectoryW
GetFileAttributesW
LocalFree
FormatMessageW
LockResource
GetProcAddress
RaiseException
GetTickCount
FlushInstructionCache
GetCurrentProcess
CreateProcessW
SetFileAttributesW
GetACP
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
GetLocaleInfoA
InterlockedExchange
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
Sleep
VirtualAlloc
VirtualFree
lstrlenW
LoadLibraryA
LoadLibraryW
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
user32
SendMessageW
GetClientRect
ShowWindow
SetWindowLongW
MessageBoxW
CharNextW
FindWindowW
IsIconic
SetWindowPos
CallWindowProcW
InvalidateRect
DestroyWindow
GetClassInfoW
LoadCursorW
RegisterClassW
CreateWindowExW
GetFocus
GetWindowLongW
DefWindowProcW
LoadImageW
GetSysColor
SetFocus
UnregisterClassA
gdi32
GetObjectW
CreateSolidBrush
DeleteObject
advapi32
RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExW
RegDeleteKeyW
shell32
SHGetSpecialFolderPathW
ole32
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VarBstrCmp
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
SysAllocString
SysFreeString
msvcr80
free
memcpy_s
_CxxThrowException
wcsncpy_s
??_V@YAXPAX@Z
__CxxFrameHandler3
_purecall
_recalloc
??_U@YAPAXI@Z
memset
??2@YAPAXI@Z
wcsstr
wcscpy_s
wcscat_s
_wcslwr
memcpy
_invalid_parameter_noinfo
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_except_handler4_common
?terminate@@YAXXZ
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
??3@YAXPAX@Z
malloc
msvcp80
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE