c:\Source\GoogleController\BarControl\Release\BarControl.pdb
Static task
static1
General
-
Target
JaffaCakes118_b6d616d61ef4b2965622683c3f214c42
-
Size
168KB
-
MD5
b6d616d61ef4b2965622683c3f214c42
-
SHA1
b95d1e6326c1dca4e5822d83a79878c5b94b26bd
-
SHA256
064b30d137086814bbf1b1c0a5c4268d789b1c61ed84d54d17eec7deeaa0a6ba
-
SHA512
b6cb695d14f97d754ab0a36d1278e7958c1089f13f36ec334d202806b25a4c6269200a186b30aff8a279a0a2340854fb584bc1231d1b564e36be44f6705ee286
-
SSDEEP
3072:wbEn+F/nWtpFYLnH5Nj6D+yvl1GSp1OaJq2fM9ikt:KPiYLnHD6Kyz/12Is
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b6d616d61ef4b2965622683c3f214c42
Files
-
JaffaCakes118_b6d616d61ef4b2965622683c3f214c42.dll regsvr32 windows:4 windows x86 arch:x86
0fcdc866b9eea635aa95a1fd49c14821
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
wininet
InternetCrackUrlA
kernel32
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
LockResource
FindResourceExA
CreateDirectoryA
WritePrivateProfileStringA
GetWindowsDirectoryA
GetShortPathNameA
GetProcAddress
LoadLibraryA
GetVersion
CloseHandle
CreateProcessA
HeapFree
GetProcessHeap
MulDiv
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetCurrentThreadId
CopyFileA
SetFileAttributesA
GetFileAttributesA
lstrcpyA
CompareStringA
CompareStringW
lstrcmpA
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
TlsGetValue
lstrcpynA
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetEnvironmentVariableA
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCPInfo
GetOEMCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
TerminateProcess
VirtualFree
HeapCreate
GetCommandLineA
GetSystemTimeAsFileTime
GetTimeZoneInformation
ExitProcess
RtlUnwind
VirtualQuery
GetSystemInfo
HeapDestroy
HeapReAlloc
HeapSize
VirtualProtect
VirtualAlloc
user32
CharNextA
UnregisterClassA
DefWindowProcA
DestroyWindow
ReleaseDC
GetDC
CharUpperA
GetClassInfoExA
LoadCursorA
RegisterClassExA
CreateWindowExA
wsprintfA
GetFocus
IsChild
BeginPaint
GetClientRect
EndPaint
CallWindowProcA
GetWindowLongA
SetWindowLongA
gdi32
CreateDCA
GetDeviceCaps
LPtoDP
SaveDC
SetWindowOrgEx
SetViewportOrgEx
DeleteDC
RestoreDC
SetMapMode
advapi32
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
ole32
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
oleaut32
SysStringLen
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VariantInit
VariantClear
SysFreeString
LoadRegTypeLi
VarUI4FromStr
shlwapi
SHSetValueA
SHGetValueA
SHDeleteValueA
PathFindExtensionA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GDSCompatibility
InstallGDS
IsToolbarRegistered
RegisterToolbar
RemoveGDSControl
UnRegisterToolbar
Version
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE