msdia80.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0560fd5f11f8cfe8060b1cccb44d49f7.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_0560fd5f11f8cfe8060b1cccb44d49f7
-
Size
667KB
-
MD5
0560fd5f11f8cfe8060b1cccb44d49f7
-
SHA1
87643b556f1557173677c54b3854ed1144236cfc
-
SHA256
34ea68b8114e4001538df857659f91eaf929486e732b85a41972389ca0e1f594
-
SHA512
bac7462d903b10373524c319504e97da48dd4fd9f43e6349c4255cd830fa128f13846f750fc018bbe7bd3ce0e85d2f422b09da10995aadb9d19e71317956c5cc
-
SSDEEP
12288:2scuWja/7ff/RwkK04Vve+u5spKZQdyxMfgjR:pOja/7ff/RVKReOc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0560fd5f11f8cfe8060b1cccb44d49f7
Files
-
JaffaCakes118_0560fd5f11f8cfe8060b1cccb44d49f7.dll regsvr32 windows:5 windows x86 arch:x86
e6825e46f3686f8468fc60f6f7e532ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InterlockedDecrement
InterlockedIncrement
GetSystemInfo
GetVersion
HeapAlloc
GetProcessHeap
HeapFree
LocalAlloc
LocalFree
DisableThreadLibraryCalls
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleFileNameW
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
LCMapStringW
LCMapStringA
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileW
UnmapViewOfFile
SetLastError
GetLastError
GetProcAddress
FreeLibrary
InterlockedExchange
LoadLibraryA
RaiseException
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
VirtualAlloc
HeapReAlloc
HeapSize
ReadFile
SetFilePointer
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetFileAttributesW
GetFileAttributesW
CopyFileW
SetFileAttributesA
GetFileAttributesA
CopyFileA
DeleteFileW
DeleteFileA
DeviceIoControl
CreateFileMappingW
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryW
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
GetDriveTypeA
MapViewOfFileEx
FlushViewOfFile
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetEnvironmentVariableW
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Sections
.text Size: 515KB - Virtual size: 515KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE