softwareoftothosedevice.pdb
Static task
static1
Behavioral task
behavioral1
Sample
289e8c29e55f49a2ce1ccb5a0257cd32_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
289e8c29e55f49a2ce1ccb5a0257cd32_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
289e8c29e55f49a2ce1ccb5a0257cd32_JaffaCakes118
-
Size
136KB
-
MD5
289e8c29e55f49a2ce1ccb5a0257cd32
-
SHA1
033b91052cd67b722e91b5d508663673c564abdb
-
SHA256
9a6e4ca90bbc072a7dd8cbbe0c70d4669247314d55c7640b4b1fc235ab6b1814
-
SHA512
b8e0bc4466463c65ec97ec3e7f32b35d757d1a2169b433d0f6e71389925c4b1825f71e54b4afac9df4d3804ce449050e707a44c1f77cd9ac879f4708b60b688a
-
SSDEEP
3072:4W9/dfKiZrDcM5Bls4BbU9BbPmvvT3yCQ:4W9/tzujobUjbPmvvj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 289e8c29e55f49a2ce1ccb5a0257cd32_JaffaCakes118
Files
-
289e8c29e55f49a2ce1ccb5a0257cd32_JaffaCakes118.dll windows:4 windows x86 arch:x86
8b6aceb3f31bbaef8dff576c4ec5d270
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
LockResource
GlobalAlloc
GlobalFree
FreeResource
LocalSize
LocalReAlloc
WideCharToMultiByte
lstrlenW
LoadResource
lstrcmpiW
GetModuleHandleW
LocalFree
LocalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
FindResourceW
CloseHandle
GetCurrentProcess
GetTickCount
MulDiv
InterlockedIncrement
InterlockedDecrement
lstrlenA
UnhandledExceptionFilter
SizeofResource
lstrcmpW
EnumResourceLanguagesW
FindResourceExW
GetLocaleInfoW
FindResourceExA
GetUserDefaultLCID
GetThreadLocale
MultiByteToWideChar
TerminateProcess
GetNumberFormatW
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
InterlockedExchange
GlobalAddAtomW
GetCurrentProcessId
GetCurrentThreadId
QueryActCtxW
ActivateActCtx
DeactivateActCtx
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
InitializeCriticalSection
GetACP
DeleteCriticalSection
DisableThreadLibraryCalls
IsBadWritePtr
lstrcmpA
CompareStringA
CompareStringW
GetSystemDefaultLCID
IsBadReadPtr
Sleep
GetUserDefaultLangID
GetDateFormatW
EnumCalendarInfoW
GetStringTypeExW
GlobalUnlock
GlobalHandle
GetLocalTime
GetTimeFormatW
GetLastError
WaitForSingleObject
SetEvent
CreateThread
CreateEventW
MapViewOfFile
CreateFileMappingW
GetFileSize
CreateFileW
UnmapViewOfFile
GlobalReAlloc
GetModuleHandleA
GetCommandLineA
ExitProcess
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualQuery
GetOEMCP
GetCPInfo
VirtualAlloc
LoadLibraryA
SetFilePointer
GetSystemTimeAsFileTime
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
VirtualProtect
GetSystemInfo
FlushFileBuffers
lstrcmpiA
user32
CheckMenuItem
SetMenu
GetMenuState
SubtractRect
UnregisterClassW
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
OffsetRect
GetDCEx
CreateIconIndirect
CopyIcon
CharPrevW
DrawFocusRect
WindowFromPoint
SetParent
AppendMenuW
CreatePopupMenu
DestroyMenu
TrackPopupMenu
AdjustWindowRect
FrameRect
ChildWindowFromPoint
EndDialog
DialogBoxIndirectParamW
GetCursor
GetForegroundWindow
AdjustWindowRectEx
GetMenu
SetWindowRgn
GetWindowRgn
InvalidateRgn
MapVirtualKeyW
ShowCaret
SetCaretPos
GrayStringW
HideCaret
CreateCaret
DestroyCaret
GetKeyboardLayout
DrawTextExW
GetShellWindow
DestroyCursor
GetUpdateRgn
ValidateRect
LockWindowUpdate
SetKeyboardState
GetKeyboardState
GetWindowTextLengthW
CharLowerW
GetKeyNameTextW
gdi32
GetPaletteEntries
SetPixelV
SetPixel
GetPixel
SetDIBColorTable
GetBitmapBits
GetDIBits
SetDIBits
MaskBlt
GetBkColor
Arc
SelectClipRgn
Rectangle
Ellipse
LineTo
MoveToEx
GetCurrentObject
CombineRgn
CreatePolygonRgn
CreateRoundRectRgn
FrameRgn
FillRgn
GetCharWidthW
CreateRectRgnIndirect
GetTextColor
ExcludeClipRect
GetClipRgn
OffsetRgn
GetTextCharsetInfo
GetCharWidthA
GetTextExtentPointA
ExtTextOutA
GetWindowExtEx
GetRasterizerCaps
CreatePatternBrush
GetClipBox
GetDCOrgEx
SetBrushOrgEx
SetBkMode
SetBkColor
SetTextColor
StretchBlt
UnrealizeObject
SelectPalette
RealizePalette
GetTextExtentPoint32W
GetDIBColorTable
CreatePalette
CreateHalftonePalette
GetTextMetricsW
ExtTextOutW
TranslateCharsetInfo
DeleteDC
GetDeviceCaps
GetObjectW
CreateFontIndirectW
OffsetWindowOrgEx
SetWindowOrgEx
CreateRectRgn
GetStockObject
CreateCompatibleDC
CreateDIBSection
CreateCompatibleBitmap
SelectObject
StretchDIBits
BitBlt
DeleteObject
GetTextExtentPointW
GetViewportExtEx
PatBlt
ExtSelectClipRgn
CreateFontW
TextOutW
CreateBitmap
CreateBitmapIndirect
CreatePen
Polyline
RectVisible
SaveDC
IntersectClipRect
RestoreDC
GetTextAlign
SetTextAlign
GetNearestColor
EnumFontFamiliesExW
CreateSolidBrush
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
FreeSid
CheckTokenMembership
OpenProcessToken
RegOpenKeyExW
RegOpenCurrentUser
RegQueryValueW
RegCreateKeyW
AllocateAndInitializeSid
Exports
Exports
AnyOr
BeingThatServer
InstancesOf
OrInstances
ServerUsersNeedTo
SoftwareByYour
TheTheOf
UserYourYourServerOr
YouThatDoOr
YouTwo
YourInternetPartitionDoThe
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ