F:\Hudson_root\workspace\Evo_5.4\5.4\evo-driver\builds\dll\i386\Release\hpcui118.pdb
Static task
static1
Behavioral task
behavioral1
Sample
11bc9e6766ed26ceb4ec7158549090d5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11bc9e6766ed26ceb4ec7158549090d5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
11bc9e6766ed26ceb4ec7158549090d5_JaffaCakes118
-
Size
3.5MB
-
MD5
11bc9e6766ed26ceb4ec7158549090d5
-
SHA1
e16c1fb3b5bed7e8415c683b01ea76f7126951bf
-
SHA256
27f092a977d7a65ba889becbb13f7ed8faf0c06910b23a0dba6fd91e966b8902
-
SHA512
fa6ee009872d980dc6f7955363b82067ca5d645f70d5d22958de068005d8abbf40a74641009574b9a51dd1253d2a9afa9e146005fdd45e6c9ede658a6b41a8b1
-
SSDEEP
49152:/XVVohXuoBJKtK9buo0UqHWupPCYxTAjyqbcyHE8YBH0uUAzX+:/bs+oh9buosCYCBAykvZ0uU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11bc9e6766ed26ceb4ec7158549090d5_JaffaCakes118
Files
-
11bc9e6766ed26ceb4ec7158549090d5_JaffaCakes118.dll windows:5 windows x86 arch:x86
426689fee02b81078f6310dc7dd6c30c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
crypt32
CryptProtectData
CryptBinaryToStringW
CryptUnprotectData
winhttp
WinHttpReceiveResponse
WinHttpSetOption
WinHttpSendRequest
WinHttpConnect
WinHttpCloseHandle
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpOpenRequest
WinHttpReadData
msimg32
TransparentBlt
ws2_32
WSACleanup
WSAStartup
WSAStringToAddressW
gethostbyname
compstui
CommonPropertySheetUIW
setupapi
SetupIterateCabinetW
kernel32
EnumResourceTypesW
CompareStringA
FileTimeToLocalFileTime
EnumResourceLanguagesW
GetEnvironmentVariableW
InitializeCriticalSection
LeaveCriticalSection
WritePrivateProfileStringW
GetPrivateProfileIntW
EnterCriticalSection
DeleteCriticalSection
DebugBreak
DeviceIoControl
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
lstrlenA
GetCurrentThread
ReleaseSemaphore
CreateSemaphoreW
GetModuleFileNameA
DuplicateHandle
GetLongPathNameW
ExpandEnvironmentStringsA
WriteFile
SetFileTime
CompareFileTime
SystemTimeToFileTime
SetFilePointer
EnumResourceNamesW
GetDateFormatW
ReadFile
GetFileSize
CreateEventW
WaitForSingleObject
CreateThread
FreeLibraryAndExitThread
Sleep
SetEvent
lstrcmpiW
GetNumberFormatW
lstrlenW
GetComputerNameW
GetCurrentProcess
FindResourceExW
MulDiv
GetLocaleInfoW
GetTempPathW
GetTempFileNameW
GetCurrentProcessId
DeleteFileW
GetSystemInfo
GetPrivateProfileStringW
InterlockedDecrement
InterlockedIncrement
LoadLibraryExW
FindNextFileW
SetCurrentDirectoryW
CreateFileMappingW
FindClose
GetCurrentDirectoryW
CopyFileW
CreateDirectoryW
UnmapViewOfFile
MapViewOfFile
FindFirstFileW
LoadLibraryA
GetUserDefaultLangID
CompareStringW
GetComputerNameA
LocalFree
SetEnvironmentVariableA
LocalAlloc
GetModuleHandleExA
VirtualQuery
VirtualFree
GetProcessHeap
CreateDirectoryA
HeapSize
GetTempPathA
OpenProcess
VirtualAlloc
VirtualProtect
InterlockedExchange
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineA
GetSystemTimeAsFileTime
RaiseException
GetCPInfo
RtlUnwind
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
IsProcessorFeaturePresent
GetStringTypeW
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStdHandle
HeapCreate
HeapDestroy
GetSystemTime
MultiByteToWideChar
GetExitCodeProcess
WideCharToMultiByte
GetSystemDirectoryW
OutputDebugStringW
CreateProcessW
FreeLibrary
OutputDebugStringA
LockResource
GlobalFree
GetLastError
GlobalUnlock
LoadLibraryW
GlobalAlloc
GlobalLock
LoadResource
FindResourceW
GetUserDefaultUILanguage
GetModuleFileNameW
HeapFree
CloseHandle
GetFileTime
CreateFileW
FileTimeToSystemTime
GetVersionExW
HeapAlloc
SystemTimeToTzSpecificLocalTime
SetLastError
GetVersion
GetModuleHandleA
GetProcAddress
GetFileAttributesW
GetModuleHandleW
CreateFileA
SetEndOfFile
WriteConsoleW
SetStdHandle
IsValidLocale
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
GetStartupInfoW
FlushFileBuffers
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
user32
GetCapture
ReleaseCapture
IsDlgButtonChecked
GetSystemMetrics
GetDlgCtrlID
GetWindowTextLengthW
RemovePropW
SetActiveWindow
PostQuitMessage
PostMessageW
SetForegroundWindow
SetPropW
GetPropW
InflateRect
OffsetRect
UnionRect
IntersectRect
UpdateWindow
SystemParametersInfoW
RedrawWindow
EqualRect
CallWindowProcW
GetClassLongW
CopyRect
GetDlgItemTextW
MessageBoxW
GetScrollRange
GetScrollInfo
SetScrollInfo
wsprintfW
GetDC
GetClassNameW
ReleaseDC
GetSysColor
GetDialogBaseUnits
GetKeyState
LoadBitmapW
DestroyIcon
DialogBoxParamW
CheckRadioButton
SetCapture
FillRect
DrawIconEx
DrawFocusRect
LoadIconW
SetRect
IsWindow
ClientToScreen
GetDlgItemInt
IsWindowEnabled
GetClientRect
SetDlgItemInt
SetWindowPos
EnumChildWindows
CreateWindowExW
MapWindowPoints
SetCursor
GetWindowRect
GetFocus
GetParent
LoadCursorW
SetFocus
PtInRect
InvalidateRect
GetWindowTextW
GetCursorPos
ShowWindow
EnableWindow
ScreenToClient
ChildWindowFromPoint
GetWindowLongW
SetWindowLongW
SendDlgItemMessageW
IsWindowVisible
SendMessageW
SetWindowTextW
EndPaint
BeginPaint
GetDlgItem
EndDialog
SetDlgItemTextW
GetForegroundWindow
CharUpperW
DestroyWindow
gdi32
GetObjectW
SetTextColor
DeleteObject
SetMapMode
RealizePalette
StretchDIBits
SelectPalette
EnumFontsW
GetTextMetricsW
GetTextExtentPoint32W
BitBlt
TextOutW
SetBkMode
ExtEscape
PatBlt
SetTextAlign
GetDeviceCaps
CreateCompatibleDC
GetStockObject
CreatePen
SetWorldTransform
SelectObject
DeleteDC
CreateRectRgn
Rectangle
CreateCompatibleBitmap
SelectClipRgn
GdiFlush
GetCurrentObject
StretchBlt
ExtFloodFill
LineTo
MoveToEx
GetPixel
CombineTransform
CreateBrushIndirect
DPtoLP
CreateBitmap
Polygon
LPtoDP
CreateSolidBrush
GetBkColor
ExtTextOutW
CreateFontIndirectW
SetBkColor
SetGraphicsMode
GetLayout
CreatePalette
SetDCPenColor
winspool.drv
GetPrintProcessorDirectoryW
GetPrinterDataW
GetPrinterW
SetPrinterDataW
SetPrinterDataExW
GetPrinterDriverW
EnumPrinterKeyW
DeletePrinterDataExW
EnumPortsW
EnumPrintersW
DeletePrinterDataW
EnumPrintProcessorDatatypesW
GetJobW
WritePrinter
EndDocPrinter
StartPagePrinter
StartDocPrinterW
EndPagePrinter
DeletePrinterKeyW
SetJobW
PrinterProperties
AddPrintProcessorW
DocumentPropertiesW
SetPrinterW
EnumPrintProcessorsW
GetPrinterDriverDirectoryW
DeviceCapabilitiesW
EnumPrinterDataExW
AddFormW
DeleteFormW
GetFormW
EnumFormsW
OpenPrinterW
GetPrinterDataExW
ClosePrinter
advapi32
CredWriteW
CredDeleteW
CredFree
CredReadW
RegConnectRegistryW
RegDeleteValueW
RegOpenKeyW
RegEnumKeyW
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
LookupAccountSidW
RegSetValueExA
FreeSid
IsValidSid
AddAccessAllowedAce
SetSecurityDescriptorOwner
AllocateAndInitializeSid
InitializeAcl
SetSecurityDescriptorDacl
LookupAccountNameW
AddAccessDeniedAce
InitializeSecurityDescriptor
RegFlushKey
GetTokenInformation
OpenProcessToken
RegEnumKeyExW
RegOpenKeyExA
GetLengthSid
RegCreateKeyExA
SetNamedSecurityInfoW
RegDeleteKeyW
RegCreateKeyW
GetUserNameW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
ole32
CoTaskMemFree
CoCreateInstance
CoInitializeSecurity
CoCreateGuid
StringFromGUID2
CoUninitialize
CoInitialize
GetHGlobalFromStream
CreateStreamOnHGlobal
CoInitializeEx
oleaut32
SysFreeString
VariantClear
SysAllocString
VariantInit
SysStringLen
dbghelp
SymGetSearchPath
SymFromAddr
SymSetSearchPath
SymInitialize
SymCleanup
SymSetOptions
SymGetOptions
SymGetLineFromAddr64
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 341KB - Virtual size: 341KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 319KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 993KB - Virtual size: 993KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ