wmpband.pdb
Static task
static1
Behavioral task
behavioral1
Sample
04f637591ce607df9f19fb946c36d7a0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04f637591ce607df9f19fb946c36d7a0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
04f637591ce607df9f19fb946c36d7a0_JaffaCakes118
-
Size
103KB
-
MD5
04f637591ce607df9f19fb946c36d7a0
-
SHA1
4d53fde00fa1e55c7d6e3bf336d78eaab4d19e8d
-
SHA256
9e8a1e3161d39ac9726116c08d46d61ec7c112ce56ca5fa26d0d01d20e72ff78
-
SHA512
ef7256995aa3ca0ff172ef4d7cfc5c782b6f273211d2e555da958113c93e5c6b767723b5dd7b348d2bb13a6bd14712f4956a899512ccc70c3b1198d8cab457e2
-
SSDEEP
1536:J3lkqE5pxFBL8JkFEUkGj0w8QcoXm0AN2OrP9WkxCaiPxmeOJTnyeoYNbd2WoAF6:xlS5GlUkV2Oz9BxclOJbypYNciFsX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04f637591ce607df9f19fb946c36d7a0_JaffaCakes118
Files
-
04f637591ce607df9f19fb946c36d7a0_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
86344be76b369762c9c16f207231150f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
advapi32
RegCreateKeyExA
RegCreateKeyExW
RegEnumKeyExW
RegEnumKeyExA
RegQueryValueExW
RegQueryValueExA
RegCloseKey
RegSetValueExW
RegSetValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteKeyW
RegDeleteKeyA
gdi32
GetDeviceCaps
kernel32
DeleteCriticalSection
GetLastError
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
lstrlenW
GetModuleHandleA
SetLastError
CompareStringA
CreateFileA
CreateFileW
GetFileAttributesA
GetFileAttributesW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
lstrcpynW
GlobalAddAtomA
GlobalAddAtomW
LoadLibraryA
LoadLibraryW
lstrcatW
lstrcmpiA
lstrcmpiW
lstrcpyW
IsBadReadPtr
GetVersionExW
GetShortPathNameA
GetShortPathNameW
CompareStringW
CreateMutexA
CreateMutexW
GetDriveTypeA
GetDriveTypeW
lstrlenA
QueryDosDeviceA
QueryDosDeviceW
CloseHandle
SetErrorMode
DeviceIoControl
GetVersion
GetExitCodeThread
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
FreeLibrary
GetProcAddress
RaiseException
GlobalDeleteAtom
SetProcessWorkingSetSize
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
mpr
WNetGetConnectionA
WNetCancelConnection2W
WNetAddConnection2W
WNetGetConnectionW
msvcrt
_wcsicmp
_vsnwprintf
iswspace
_wtol
wcspbrk
iswdigit
_wtoi
wcsstr
wcschr
_wcsnicmp
wcsrchr
memmove
wcslen
wcsncmp
towupper
_purecall
_snwprintf
wcsncpy
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
wcscmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_beginthreadex
ole32
OleLockRunning
CoTaskMemFree
StringFromCLSID
RevokeDragDrop
RegisterDragDrop
CoCreateInstance
CreateStreamOnHGlobal
CoMarshalInterface
CoUnmarshalInterface
oleaut32
VariantInit
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
SysStringLen
VariantClear
SysAllocStringLen
VariantCopy
VariantChangeType
shell32
ShellExecuteExA
shlwapi
PathGetCharTypeW
PathGetCharTypeA
user32
EndPaint
DestroyAcceleratorTable
BeginPaint
GetClientRect
InvalidateRgn
InvalidateRect
SetFocus
GetFocus
SendMessageA
SendMessageTimeoutA
GetDesktopWindow
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
FindWindowA
FindWindowW
GetClassLongA
GetClassNameA
GetClassNameW
GetWindowLongA
GetWindowLongW
GetWindowTextA
IsWindow
DestroyWindow
LoadCursorA
LoadCursorW
LoadStringA
LoadStringW
MessageBoxW
PostMessageA
PostMessageW
RegisterClassA
RegisterClassW
UnregisterClassA
UnregisterClassW
RegisterWindowMessageA
SendMessageW
SetWindowLongA
SetWindowLongW
CharNextW
CreateAcceleratorTableA
CreateAcceleratorTableW
GetWindowThreadProcessId
GetAsyncKeyState
CharNextA
GetDC
ReleaseDC
GetWindowTextW
ShowWindow
SetLayeredWindowAttributes
FillRect
GetTopWindow
GetWindow
GetWindowRect
EqualRect
SetRect
UnregisterHotKey
SetTimer
KillTimer
SetWindowPos
RegisterHotKey
IsIconic
GetParent
IsWindowVisible
GetCursorPos
SetForegroundWindow
EnumWindows
uxtheme
DrawThemeParentBackground
OpenThemeData
CloseThemeData
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ