C:\devel\projects\mss\build\win\mss32.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_43198b92a059eb7dae8a5cb62ff178a0.dll
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_43198b92a059eb7dae8a5cb62ff178a0
-
Size
481KB
-
MD5
43198b92a059eb7dae8a5cb62ff178a0
-
SHA1
f5dec61070421f807e006497fe320675a9281b0a
-
SHA256
203d270cd275fdb347981f5f4e8c53e9e8126f1f0b890dcf33204aaa681b23ce
-
SHA512
aa4dae9e89426536566af520ffc2b50306f08143bb2d551732877146123f8af9ce8cfa0b4fd7463a934623fc7b8d30fb46bf223897b57420595f50b7b6556172
-
SSDEEP
12288:/fPQCxgYD8G36od+nzDRpujoEHprlW4nEDqTvTZOOUNvDQ:HPBxZ6VQjOOWN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_43198b92a059eb7dae8a5cb62ff178a0
Files
-
JaffaCakes118_43198b92a059eb7dae8a5cb62ff178a0.dll windows:5 windows x86 arch:x86
5aa366210af960970bd76873f1654055
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
wsprintfA
GetTopWindow
GetForegroundWindow
MessageBoxA
GetWindowLongA
GetActiveWindow
IsWindow
GetWindowThreadProcessId
GetWindow
kernel32
SetEnvironmentVariableA
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
HeapAlloc
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcessId
SetErrorMode
FreeLibrary
FindFirstFileA
GetProcAddress
FindClose
LoadLibraryA
FindNextFileA
OutputDebugStringA
Sleep
lstrcatA
GetProfileStringA
CreateFileA
WriteFile
GlobalAlloc
GlobalFree
CloseHandle
SetFilePointer
ReadFile
TlsGetValue
SetUnhandledExceptionFilter
WaitForSingleObject
GetCurrentThread
InitializeCriticalSection
TlsSetValue
LeaveCriticalSection
CreateSemaphoreA
GetEnvironmentVariableA
SetThreadPriority
ReleaseSemaphore
RaiseException
EnterCriticalSection
GetThreadPriority
CreateMutexA
DeleteCriticalSection
GetCurrentThreadId
ReleaseMutex
TlsAlloc
ResumeThread
CreateThread
QueryPerformanceCounter
GetTickCount
QueryPerformanceFrequency
GetSystemInfo
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
IsValidCodePage
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteConsoleW
GetConsoleOutputCP
GetSystemTimeAsFileTime
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapSize
ExitProcess
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WideCharToMultiByte
GetTimeZoneInformation
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
WriteConsoleA
winmm
timeBeginPeriod
timeEndPeriod
waveOutClose
waveOutWrite
waveOutReset
timeGetTime
waveOutGetDevCapsA
waveOutUnprepareHeader
waveOutGetID
waveOutPrepareHeader
waveInClose
waveInPrepareHeader
waveInOpen
waveInAddBuffer
waveInReset
waveInUnprepareHeader
waveInStart
waveOutOpen
Exports
Exports
?AIL_enqueue_event_velocity@@YGHPAHMMMM@Z
AIL_debug
AIL_debug_log
AIL_indent
AIL_mem_printf
AIL_sprintf
AIL_sys_debug
MilesEventSetAuditionFunctions
_AIL_3D_distance_factor@4
_AIL_3D_doppler_factor@4
_AIL_3D_rolloff_factor@4
_AIL_IO_thread_handle@4
_AIL_MMX_available@0
_AIL_WAV_file_write@20
_AIL_WAV_info@8
_AIL_WAV_marker_by_index@12
_AIL_WAV_marker_by_name@8
_AIL_WAV_marker_count@4
_AIL_active_sample_count@4
_AIL_add_apply_environment_event_step@12
_AIL_add_cache_sounds_event_step@12
_AIL_add_clear_state_event_step@4
_AIL_add_comment_event_step@8
_AIL_add_control_sounds_event_step@40
_AIL_add_enable_limit_event_step@8
_AIL_add_exec_event_event_step@8
_AIL_add_move_var_event_step@20
_AIL_add_persist_preset_event_step@20
_AIL_add_ramp_event_step@32
_AIL_add_set_lfo_event_step@40
_AIL_add_setblend_event_step@36
_AIL_add_sound_limit_event_step@12
_AIL_add_start_sound_event_step@96
_AIL_add_uncache_sounds_event_step@12
_AIL_allocate_bus@4
_AIL_allocate_sample_handle@4
_AIL_apply_environment_preset@12
_AIL_apply_raw_environment_preset@8
_AIL_apply_raw_sound_preset@8
_AIL_apply_sound_preset@12
_AIL_auto_service_stream@8
_AIL_background@0
_AIL_background_CPU_percent@0
_AIL_bus_enable_limiter@12
_AIL_bus_sample_handle@8
_AIL_calculate_3D_channel_levels@68
_AIL_close_digital_driver@4
_AIL_close_event@4
_AIL_close_filter@4
_AIL_close_input@4
_AIL_close_soundbank@4
_AIL_close_stream@4
_AIL_configure_logging@12
_AIL_create_event@0
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_digital_CPU_percent@4
_AIL_digital_configuration@16
_AIL_digital_driver_processor@8
_AIL_digital_handle_reacquire@4
_AIL_digital_handle_release@4
_AIL_digital_latency@4
_AIL_digital_master_reverb@20
_AIL_digital_master_reverb_levels@16
_AIL_digital_master_volume_level@4
_AIL_digital_output_filter@4
_AIL_enable_limiter@8
_AIL_end_sample@4
_AIL_enqueue_event_buffer@16
_AIL_enqueue_event_cancel@4
_AIL_enqueue_event_context@8
_AIL_enqueue_event_end_named@8
_AIL_enqueue_event_filter@12
_AIL_enqueue_event_position@16
_AIL_enqueue_event_selection@8
_AIL_enqueue_event_start@0
_AIL_enqueue_event_variablef@12
_AIL_enumerate_environment_presets@16
_AIL_enumerate_events@16
_AIL_enumerate_filter_properties@12
_AIL_enumerate_filter_sample_properties@12
_AIL_enumerate_filters@12
_AIL_enumerate_output_filter_driver_properties@12
_AIL_enumerate_output_filter_sample_properties@12
_AIL_enumerate_sample_stage_properties@16
_AIL_enumerate_sound_assets@12
_AIL_enumerate_sound_presets@16
_AIL_file_callbacks@16
_AIL_file_error@0
_AIL_file_read@8
_AIL_file_read_info@16
_AIL_file_size@4
_AIL_file_size_info@12
_AIL_file_type@8
_AIL_file_type_named@12
_AIL_file_write@12
_AIL_filter_property@20
_AIL_find_environment_preset@8
_AIL_find_filter@8
_AIL_find_marker_in_list@8
_AIL_find_sound_preset@8
_AIL_free_all_busses@4
_AIL_get_event_contents@12
_AIL_get_input_info@4
_AIL_get_marker_list@8
_AIL_get_preference@4
_AIL_get_soundbank_filename@4
_AIL_get_soundbank_mem_usage@4
_AIL_get_soundbank_name@4
_AIL_get_time@0
_AIL_get_timer_highest_delay@0
_AIL_init_sample@8
_AIL_install_bus_compressor@16
_AIL_last_error@0
_AIL_listener_3D_orientation@28
_AIL_listener_3D_position@16
_AIL_listener_3D_velocity@16
_AIL_listener_relative_receiver_array@8
_AIL_load_sample_buffer@16
_AIL_lock_mutex@0
_AIL_mem_alloc_lock@4
_AIL_mem_alloc_lock_info@12
_AIL_mem_close@12
_AIL_mem_create@0
_AIL_mem_create_from_existing@8
_AIL_mem_error@4
_AIL_mem_free_lock@4
_AIL_mem_open@8
_AIL_mem_pos@4
_AIL_mem_printc@8
_AIL_mem_prints@8
_AIL_mem_read@12
_AIL_mem_seek@8
_AIL_mem_size@4
_AIL_mem_use_free@4
_AIL_mem_use_malloc@4
_AIL_mem_write@12
_AIL_minimum_sample_buffer_size@12
_AIL_ms_count64@0
_AIL_ms_count@0
_AIL_ms_to_time@8
_AIL_next_event_step@16
_AIL_open_digital_driver@16
_AIL_open_filter@8
_AIL_open_input@4
_AIL_open_soundbank@8
_AIL_open_stream@12
_AIL_output_filter_driver_property@20
_AIL_pause_stream@8
_AIL_platform_property@20
_AIL_primary_digital_driver@4
_AIL_process_digital_audio@24
_AIL_register_EOB_callback@8
_AIL_register_EOS_callback@8
_AIL_register_SOB_callback@8
_AIL_register_falloff_function_callback@8
_AIL_register_stream_callback@8
_AIL_register_timer@4
_AIL_release_all_timers@0
_AIL_release_sample_handle@4
_AIL_release_timer_handle@4
_AIL_request_EOB_ASI_reset@12
_AIL_resolve_raw_environment_preset@8
_AIL_resolve_raw_sound_preset@12
_AIL_resume_sample@4
_AIL_room_type@8
_AIL_sample_3D_cone@16
_AIL_sample_3D_distances@16
_AIL_sample_3D_orientation@28
_AIL_sample_3D_position@16
_AIL_sample_3D_velocity@16
_AIL_sample_51_volume_levels@28
_AIL_sample_51_volume_pan@24
_AIL_sample_buffer_available@4
_AIL_sample_buffer_count@4
_AIL_sample_buffer_info@24
_AIL_sample_bus@4
_AIL_sample_channel_count@8
_AIL_sample_channel_levels@20
_AIL_sample_exclusion@4
_AIL_sample_granularity@4
_AIL_sample_loaded_len@4
_AIL_sample_loop_block@12
_AIL_sample_loop_count@4
_AIL_sample_low_pass_cut_off@8
_AIL_sample_mixed_ms@4
_AIL_sample_ms_lookup@12
_AIL_sample_ms_position@12
_AIL_sample_obstruction@4
_AIL_sample_occlusion@4
_AIL_sample_output_levels@20
_AIL_sample_playback_delay@4
_AIL_sample_playback_rate@4
_AIL_sample_playback_rate_factor@4
_AIL_sample_position@4
_AIL_sample_processor@8
_AIL_sample_reverb_levels@12
_AIL_sample_speaker_scale_factors@16
_AIL_sample_stage_property@28
_AIL_sample_status@4
_AIL_sample_user_data@8
_AIL_sample_volume_levels@12
_AIL_sample_volume_pan@12
_AIL_serve@0
_AIL_service_stream@8
_AIL_set_3D_distance_factor@8
_AIL_set_3D_doppler_factor@8
_AIL_set_3D_rolloff_factor@8
_AIL_set_async_callbacks@28
_AIL_set_digital_driver_processor@12
_AIL_set_digital_master_reverb@20
_AIL_set_digital_master_reverb_levels@16
_AIL_set_digital_master_volume_level@8
_AIL_set_error@4
_AIL_set_event_settings@4
_AIL_set_file_callbacks@16
_AIL_set_input_state@8
_AIL_set_listener_3D_orientation@28
_AIL_set_listener_3D_position@16
_AIL_set_listener_3D_velocity@20
_AIL_set_listener_3D_velocity_vector@16
_AIL_set_listener_relative_receiver_array@12
_AIL_set_named_sample_file@20
_AIL_set_preference@8
_AIL_set_redist_directory@4
_AIL_set_room_type@12
_AIL_set_sample_3D_cone@16
_AIL_set_sample_3D_distances@16
_AIL_set_sample_3D_orientation@28
_AIL_set_sample_3D_position@16
_AIL_set_sample_3D_velocity@20
_AIL_set_sample_3D_velocity_vector@16
_AIL_set_sample_51_volume_levels@28
_AIL_set_sample_51_volume_pan@24
_AIL_set_sample_address@12
_AIL_set_sample_adpcm_block_size@8
_AIL_set_sample_buffer_count@8
_AIL_set_sample_bus@8
_AIL_set_sample_channel_levels@20
_AIL_set_sample_exclusion@8
_AIL_set_sample_file@12
_AIL_set_sample_info@8
_AIL_set_sample_is_3D@8
_AIL_set_sample_loop_block@12
_AIL_set_sample_loop_count@8
_AIL_set_sample_low_pass_cut_off@12
_AIL_set_sample_ms_position@8
_AIL_set_sample_obstruction@8
_AIL_set_sample_occlusion@8
_AIL_set_sample_playback_delay@8
_AIL_set_sample_playback_rate@8
_AIL_set_sample_playback_rate_factor@8
_AIL_set_sample_position@8
_AIL_set_sample_processor@12
_AIL_set_sample_reverb_levels@12
_AIL_set_sample_speaker_scale_factors@16
_AIL_set_sample_user_data@12
_AIL_set_sample_volume_levels@12
_AIL_set_sample_volume_pan@12
_AIL_set_speaker_configuration@16
_AIL_set_speaker_reverb_levels@20
_AIL_set_stream_loop_block@12
_AIL_set_stream_loop_count@8
_AIL_set_stream_ms_position@8
_AIL_set_stream_position@8
_AIL_set_stream_user_data@12
_AIL_set_timer_frequency@8
_AIL_set_timer_period@8
_AIL_set_timer_user@8
_AIL_shutdown@0
_AIL_size_processed_digital_audio@16
_AIL_sleep@4
_AIL_sound_asset_info@16
_AIL_speaker_configuration@20
_AIL_speaker_reverb_levels@16
_AIL_start_all_timers@0
_AIL_start_sample@4
_AIL_start_stream@4
_AIL_start_timer@4
_AIL_startup@0
_AIL_stop_all_timers@0
_AIL_stop_sample@4
_AIL_stop_timer@4
_AIL_stream_filled_percent@4
_AIL_stream_info@20
_AIL_stream_loop_count@4
_AIL_stream_ms_position@12
_AIL_stream_position@4
_AIL_stream_sample_handle@4
_AIL_stream_status@4
_AIL_stream_user_data@8
_AIL_stricmp@8
_AIL_strnicmp@12
_AIL_time_to_ms@8
_AIL_timer_thread_handle@4
_AIL_unapply_environment_preset@12
_AIL_unapply_raw_environment_preset@8
_AIL_unapply_raw_sound_preset@8
_AIL_unapply_sound_preset@12
_AIL_unlock_mutex@0
_AIL_update_listener_3D_position@8
_AIL_update_sample_3D_position@8
_AIL_us_count64@0
_AIL_us_count@0
_MIX_RIB_MAIN@20
_MSS_alloc_info@16
_MSS_free_info@16
_MilesAddEventSystem@4
_MilesAddSoundBank@8
_MilesAsyncFileCancel@4
_MilesAsyncFileRead@4
_MilesAsyncFileStatus@8
_MilesAsyncSetPaused@4
_MilesAsyncShutdown@0
_MilesAsyncStartup@0
_MilesBeginEventQueueProcessing@0
_MilesClearEventQueue@0
_MilesCompleteEventQueueProcessing@0
_MilesEnqueueEvent@24
_MilesEnqueueEventByName@4
_MilesEnqueueEventContext@28
_MilesEnumeratePresetPersists@12
_MilesEnumerateSoundInstances@28
_MilesFindEvent@8
_MilesGetBankFunctions@0
_MilesGetEventLength@4
_MilesGetEventSystemState@8
_MilesGetVarF@12
_MilesGetVarI@12
_MilesPauseSoundInstances@12
_MilesRegisterRand@4
_MilesReleaseSoundBank@4
_MilesRequeueAsyncs@0
_MilesResumeSoundInstances@12
_MilesSetBankFunctions@4
_MilesSetEventErrorCallback@4
_MilesSetSoundLabelLimits@8
_MilesSetSoundStartOffset@12
_MilesSetVarF@12
_MilesSetVarI@12
_MilesShutdownEventSystem@0
_MilesStartSoundInstance@32
_MilesStartupEventSystem@16
_MilesStopSoundInstances@12
_MilesTextDumpEventSystem@0
_MilesUseTelemetry@4
_MilesUseTmLite@4
_RIB_alloc_provider_handle@4
_RIB_enumerate_interface@20
_RIB_enumerate_providers@12
_RIB_error@0
_RIB_find_file_dec_provider@20
_RIB_find_file_provider@12
_RIB_find_files_provider@20
_RIB_find_provider@12
_RIB_free_provider_handle@4
_RIB_free_provider_library@4
_RIB_load_application_providers@4
_RIB_load_provider_library@4
_RIB_load_static_provider_library@8
_RIB_provider_system_data@8
_RIB_provider_user_data@8
_RIB_register_interface@16
_RIB_request_interface@16
_RIB_request_interface_entry@20
_RIB_set_provider_system_data@12
_RIB_set_provider_user_data@12
_RIB_type_string@8
_RIB_unregister_interface@16
Sections
.text Size: 298KB - Virtual size: 297KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
MSSMIXER Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RADCODE Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RADDATA Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RADCONST Size: 512B - Virtual size: 135B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE