C:\Work\Applet\__Partners\dll\Release\LinkSave2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
11d518bdccd9e744a930c7523760a1c3_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
11d518bdccd9e744a930c7523760a1c3_JaffaCakes118
-
Size
176KB
-
MD5
11d518bdccd9e744a930c7523760a1c3
-
SHA1
e3a09aec34740e584c4bd4f92dce8ae5f6b93029
-
SHA256
deca26a35321662e26af99801bb9879fcc859c13dbe1a5c03b88e80109575ceb
-
SHA512
aa05b9e60698da3a132e914d15d3e75e432a5c38bb48220c53a6bd421f156b07a536bfafbfe37594e5c0c1b3d238115544aec86caff1c388f334b146b1bca758
-
SSDEEP
3072:bIayPWrhx4Iv6+ijxwbsdri3XBcegMDHT22hKyEVKz4sJlty:bIayu9Rbijxw0i3RPDaEKyYo7J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11d518bdccd9e744a930c7523760a1c3_JaffaCakes118
Files
-
11d518bdccd9e744a930c7523760a1c3_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
77616aaec936ee5e834a82547cbcffcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
urlmon
URLOpenBlockingStreamA
kernel32
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
GlobalFree
lstrcpynA
GlobalAlloc
GetModuleFileNameA
CompareStringA
MultiByteToWideChar
GetStringTypeExA
InterlockedDecrement
UnmapViewOfFile
FlushFileBuffers
lstrcpyA
MapViewOfFile
CreateFileMappingA
GetTickCount
LCMapStringW
LCMapStringA
InterlockedCompareExchange
Sleep
FreeLibrary
GetVersionExA
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualQuery
GetUserDefaultLCID
GetStringTypeW
LocalFree
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
GetStringTypeA
RtlUnwind
ExitProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
user32
wsprintfA
LoadStringA
advapi32
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
oleaut32
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocString
VariantClear
shlwapi
SHDeleteKeyA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 128KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ