C:\BUILD_~1\jdk6_29\control\build\WINDOW~1\tmp\sun\sun.jkernel\jkernel\obj\jkernel.pdb
Static task
static1
Behavioral task
behavioral1
Sample
11cdd2254c0871984bbf8183bfe5f250_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
11cdd2254c0871984bbf8183bfe5f250_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
11cdd2254c0871984bbf8183bfe5f250_JaffaCakes118
-
Size
292KB
-
MD5
11cdd2254c0871984bbf8183bfe5f250
-
SHA1
4931c80fa8dfb1a1de630b1620f61507bb212ab5
-
SHA256
3717e24f5033206457e0a9d889d04fd7d461a06e56995b2c852db164d238dca9
-
SHA512
cd4c12f416872e938ebe921d35a3fd01ed0d5cf6f0e867edbade63ef94fd2d6a7205c33e6c4d839dc564e2613628ecdf78fb92fb09ed74b4c0cf5e1052c33956
-
SSDEEP
3072:65q8AGmVZ1FL0dV0ZxcQSlBujZqMNFz1LX9ua3j45NMFogxdm28f/qaQuJUD4:+LmVZXL0KvHLLHYfFQ4UD4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11cdd2254c0871984bbf8183bfe5f250_JaffaCakes118
Files
-
11cdd2254c0871984bbf8183bfe5f250_JaffaCakes118.dll windows:4 windows x86 arch:x86
66e717e4f893afb37e194ffad92f8651
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA
wininet
HttpQueryInfoA
InternetReadFile
InternetTimeToSystemTime
InternetCloseHandle
InternetOpenA
InternetCrackUrlA
InternetConnectA
HttpOpenRequestA
InternetTimeFromSystemTime
HttpAddRequestHeadersA
HttpSendRequestA
InternetErrorDlg
gdi32
CreateSolidBrush
BitBlt
CreateCompatibleBitmap
SelectObject
GetStockObject
GetObjectA
CreateCompatibleDC
StretchBlt
DeleteObject
DeleteDC
SaveDC
SetGraphicsMode
RestoreDC
CreateFontIndirectA
DPtoLP
GetDeviceCaps
SetWindowOrgEx
SetViewportOrgEx
ModifyWorldTransform
kernel32
lstrcatA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
ExitProcess
QueryPerformanceCounter
GetTickCount
lstrcpyA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
LocalFree
GetProcAddress
LoadLibraryA
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateThread
ReadFile
WriteFile
ConnectNamedPipe
GetLastError
CreateNamedPipeA
CreateMutexA
OpenMutexA
DeleteFileA
MoveFileA
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
GetModuleFileNameA
GetModuleHandleA
GetExitCodeThread
GetCommandLineA
GetCurrentProcessId
CreateFileA
LocalAlloc
InterlockedIncrement
InterlockedDecrement
lstrlenW
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
FlushInstructionCache
GetCurrentProcess
GlobalAlloc
SetEvent
ResetEvent
GetCurrentThreadId
SetLastError
CreateEventA
MulDiv
GlobalUnlock
GlobalLock
lstrcmpA
GlobalFree
GlobalHandle
LockResource
Sleep
SetEndOfFile
SetFilePointer
CompareFileTime
SystemTimeToFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetSystemTimeAsFileTime
user32
SetFocus
RedrawWindow
SetWindowPos
GetClassNameA
GetSysColor
CreateAcceleratorTableA
CreateWindowExA
RegisterClassExA
LoadCursorA
GetClassInfoExA
GetWindowTextA
GetWindowTextLengthA
RegisterWindowMessageA
DialogBoxIndirectParamA
GetActiveWindow
GetFocus
MapDialogRect
DestroyWindow
DefWindowProcA
GetDlgCtrlID
LoadBitmapA
GetClientRect
LoadStringW
IsWindow
MessageBoxW
EndDialog
LoadIconA
SetWindowTextA
PostMessageA
SendMessageA
IsChild
DestroyAcceleratorTable
GetWindow
BeginPaint
EndPaint
CallWindowProcA
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
FillRect
SetCapture
SetWindowContextHelpId
ReleaseCapture
GetDlgItem
EnableWindow
KillTimer
SetTimer
GetWindowLongA
SetWindowLongA
CharNextA
wsprintfA
LoadStringA
MessageBoxA
UnregisterClassA
GetParent
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
OleLockRunning
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
OleUninitialize
shell32
ShellExecuteExA
SHFileOperationA
oleaut32
LoadRegTypeLi
VariantInit
VariantClear
OleCreateFontIndirect
SysStringByteLen
SysStringLen
SysAllocString
SysAllocStringLen
VarUI4FromStr
SysFreeString
LoadTypeLi
msvcr71
__security_error_handler
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
memset
_stat
strrchr
sprintf
_local_unwind2
wcstombs
malloc
_vsnprintf
??_V@YAXPAX@Z
??3@YAXPAX@Z
free
_except_handler3
_beginthreadex
strstr
??_U@YAPAXI@Z
_resetstkoflw
realloc
time
strncmp
wcsncat
wcslen
_snwprintf
difftime
??2@YAPAXI@Z
_snprintf
printf
Exports
Exports
_Java_sun_jkernel_BackgroundDownloader_getBackgroundDownloadKey@8
_Java_sun_jkernel_Bundle_extraCompress@16
_Java_sun_jkernel_Bundle_extraUncompress@16
_Java_sun_jkernel_DownloadManager_addToTotalDownloadSize@12
_Java_sun_jkernel_DownloadManager_askUserToRetryDownloadOrQuit@12
_Java_sun_jkernel_DownloadManager_bundleInstallComplete@8
_Java_sun_jkernel_DownloadManager_bundleInstallStart@8
_Java_sun_jkernel_DownloadManager_displayError@16
_Java_sun_jkernel_DownloadManager_downloadFromURLImpl@24
_Java_sun_jkernel_DownloadManager_getCurrentProcessId@8
_Java_sun_jkernel_DownloadManager_getDebugKey@8
_Java_sun_jkernel_DownloadManager_getUrlFromRegistry@8
_Java_sun_jkernel_DownloadManager_getVisitorId0@8
_Java_sun_jkernel_DownloadManager_isIEProtectedMode@8
_Java_sun_jkernel_DownloadManager_isJBrokerRunning@8
_Java_sun_jkernel_DownloadManager_isWindowsVista@8
_Java_sun_jkernel_DownloadManager_launchJBroker@12
_Java_sun_jkernel_DownloadManager_moveDirWithBrokerImpl@16
_Java_sun_jkernel_DownloadManager_moveFileWithBrokerImpl@16
_Java_sun_jkernel_DownloadManager_postDownloadComplete@8
_Java_sun_jkernel_DownloadManager_postDownloadError@12
_Java_sun_jkernel_DownloadManager_startBackgroundDownloadWithBrokerImpl@12
_Java_sun_jkernel_Mutex_acquire__@8
_Java_sun_jkernel_Mutex_acquire__I@12
_Java_sun_jkernel_Mutex_createNativeMutex@12
_Java_sun_jkernel_Mutex_destroyNativeMutex@8
_Java_sun_jkernel_Mutex_release@8
preJVMStart
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE