winampGetInModule2
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4138d42a69c22e5ea63e154f0cf55fc0.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_4138d42a69c22e5ea63e154f0cf55fc0
-
Size
87KB
-
MD5
4138d42a69c22e5ea63e154f0cf55fc0
-
SHA1
65cdc356d39884e26aa4ab36fd4d2266bdc6c12c
-
SHA256
073b66fb7d4606664bd6af9e27a23a4d032fc54043250b41779ddab2616a8a9f
-
SHA512
1ffda2e58c43e97a7ca5c0e7d773bff992d9686203c68325f3684fc00527e50c005c0259007d5b1863b113d062c5f3528f7721fe8a04c60c84a063945742d12b
-
SSDEEP
1536:gQ3Cu+rDWMMdTS9LL66mwOT3hx57TVwOto1+GyCPcFTzd3yj60Mo:nyu+HW5iLLmwOTBpwOKHyFy60M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4138d42a69c22e5ea63e154f0cf55fc0
Files
-
JaffaCakes118_4138d42a69c22e5ea63e154f0cf55fc0.dll windows:4 windows x86 arch:x86
d2b5b7cc51d0d7fc4907424a3f642a42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ResumeThread
GetModuleFileNameA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetTickCount
GetTempPathA
DeleteFileA
CloseHandle
ReadFile
GetFileSize
CreateFileA
SetFilePointer
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
DisableThreadLibraryCalls
SetThreadPriority
CreateThread
TerminateThread
WaitForSingleObject
MulDiv
user32
SetWindowTextA
GetDlgItemTextA
EndDialog
GetDlgItem
SetDlgItemTextA
SendDlgItemMessageA
MessageBoxA
wsprintfA
SendMessageA
DialogBoxParamA
PostMessageA
msacm32
acmFormatTagDetailsA
acmFormatDetailsA
acmFormatSuggest
acmStreamOpen
acmStreamUnprepareHeader
acmStreamClose
acmStreamConvert
acmStreamPrepareHeader
msvcrt
_stricmp
strlen
atoi
_initterm
strncmp
_adjust_fdiv
_ftol
??2@YAPAXI@Z
__CxxFrameHandler
free
malloc
memcpy
strcpy
memcmp
strrchr
strncpy
memset
??3@YAXPAX@Z
realloc
Exports
Exports
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE