WMPNS.pdb
Static task
static1
Behavioral task
behavioral1
Sample
176aa5ecb5a01649e4fdaea9915ef131_JaffaCakes118.dll
Resource
win7-20240221-en
General
-
Target
176aa5ecb5a01649e4fdaea9915ef131_JaffaCakes118
-
Size
312KB
-
MD5
176aa5ecb5a01649e4fdaea9915ef131
-
SHA1
801f6060755f8e4afdec41aba0c062b4890d0a38
-
SHA256
850d8de52e9d88bae530374aac943fc6d60d6661933d9953ea5715e4433cceb4
-
SHA512
fd781cbad48d079c02bc14e268fb1717f2c40a571e811c3f36e727546be1cfcfd04f158d2d0c6302faae990b0f8546e5f67b77703451b81151b5130c93dbc084
-
SSDEEP
6144:hcTbuKgqP75mDbeWQztbeO3BUd2BfQzkfP6F:O/HEDbeFtbeu7gYY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 176aa5ecb5a01649e4fdaea9915ef131_JaffaCakes118
Files
-
176aa5ecb5a01649e4fdaea9915ef131_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
1a4c9c69f74a3e0593074a6c0d439868
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
wcsstr
_wcsnicmp
_wtol
_vsnwprintf
wcschr
wcspbrk
iswspace
memmove
wcslen
wcsncmp
towupper
_wcsicmp
wcsrchr
vswprintf
_beginthreadex
_wtoi
iswdigit
wcscmp
_snwprintf
wcsncpy
??3@YAXPAX@Z
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
_purecall
_except_handler3
??2@YAPAXI@Z
mpr
WNetGetConnectionW
WNetGetConnectionA
WNetCancelConnection2W
WNetAddConnection2W
kernel32
CompareStringW
GetDriveTypeA
GetDriveTypeW
QueryDosDeviceA
QueryDosDeviceW
GetWindowsDirectoryW
GetLocaleInfoW
GetLocaleInfoA
GetVersionExW
lstrcpyW
lstrcatW
LoadLibraryW
lstrcpynW
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
GetFileAttributesW
GetFileAttributesA
lstrlenA
CloseHandle
GetCurrentThreadId
WaitForSingleObject
SetEvent
FlushInstructionCache
GetCurrentProcess
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
SetLastError
GetLastError
FreeLibrary
SetErrorMode
GetProcAddress
GetExitCodeThread
CreateFileW
CreateFileA
DeviceIoControl
GetVersion
GetUserDefaultLangID
CreateThread
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
CreateEventW
CreateEventA
CompareStringA
GetModuleHandleA
GetWindowsDirectoryA
lstrlenW
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
gdi32
SelectPalette
RealizePalette
RectVisible
SetDIBitsToDevice
StretchDIBits
MaskBlt
StretchBlt
CreateDIBSection
GetDIBColorTable
GetDeviceCaps
GetObjectW
GetObjectType
GetObjectA
CreateICW
CreateICA
GetClipBox
CreateCompatibleDC
SelectClipRgn
SelectObject
OffsetViewportOrgEx
DeleteDC
SetRectRgn
CreateRectRgnIndirect
DeleteObject
user32
MessageBoxA
MessageBoxW
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostThreadMessageA
PostThreadMessageW
RegisterClassExA
RegisterClassExW
UnregisterClassA
UnregisterClassW
RegisterWindowMessageA
SendMessageW
SetWindowLongA
SetWindowLongW
wvsprintfW
GetMonitorInfoA
GetMonitorInfoW
CharNextW
GetCapture
ReleaseCapture
SetCapture
GetFocus
SetFocus
IsWindowVisible
GetDC
ReleaseDC
InvalidateRect
InvalidateRgn
PtInRect
MonitorFromRect
WindowFromDC
LoadCursorW
GetWindowTextW
GetWindowTextA
GetWindowLongW
GetWindowLongA
GetMessageW
GetMessageA
GetClassNameA
GetClassLongA
GetClassInfoExW
GetClassInfoExA
DispatchMessageW
DispatchMessageA
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
GetSystemMetrics
CharNextA
GetCursorPos
MapWindowPoints
CallWindowProcW
CallWindowProcA
BeginPaint
CopyRect
LoadCursorA
OffsetRect
EndPaint
IsChild
ShowWindow
GetClientRect
SetWindowPos
GetParent
GetWindowRect
TranslateMessage
SetParent
IsWindow
DestroyWindow
BringWindowToTop
SendMessageA
advapi32
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegCloseKey
ole32
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
comctl32
InitCommonControlsEx
oleaut32
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
VariantInit
SysStringLen
SysFreeString
shlwapi
PathGetCharTypeW
PathGetCharTypeA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_Java_WMPNS_EventThread_CheckEvents@8
_Java_WMPNS_EventThread_GetThreadID@8
_Java_WMPNS_EventThread_kill@12
_Java_WMPNS_IWMPCdromCollection_equalsNative@20
_Java_WMPNS_IWMPCdromCollection_getByDriveSpecifierNative@20
_Java_WMPNS_IWMPCdromCollection_getCountNative@16
_Java_WMPNS_IWMPCdromCollection_itemNative@24
_Java_WMPNS_IWMPCdrom_ejectNative@16
_Java_WMPNS_IWMPCdrom_equalsNative@20
_Java_WMPNS_IWMPCdrom_getDriveSpecifierNative@16
_Java_WMPNS_IWMPCdrom_getPlaylistNative@16
_Java_WMPNS_IWMPClosedCaption_equalsNative@20
_Java_WMPNS_IWMPClosedCaption_getCaptioningIDNative@16
_Java_WMPNS_IWMPClosedCaption_getSAMIFileNameNative@16
_Java_WMPNS_IWMPClosedCaption_getSAMILangCountNative@16
_Java_WMPNS_IWMPClosedCaption_getSAMILangIDNative@24
_Java_WMPNS_IWMPClosedCaption_getSAMILangNameNative@24
_Java_WMPNS_IWMPClosedCaption_getSAMILangNative@16
_Java_WMPNS_IWMPClosedCaption_getSAMIStyleCountNative@16
_Java_WMPNS_IWMPClosedCaption_getSAMIStyleNameNative@24
_Java_WMPNS_IWMPClosedCaption_getSAMIStyleNative@16
_Java_WMPNS_IWMPClosedCaption_setCaptioningIDNative@20
_Java_WMPNS_IWMPClosedCaption_setSAMIFileNameNative@20
_Java_WMPNS_IWMPClosedCaption_setSAMILangNative@20
_Java_WMPNS_IWMPClosedCaption_setSAMIStyleNative@20
_Java_WMPNS_IWMPControls_equalsNative@20
_Java_WMPNS_IWMPControls_fastForwardNative@16
_Java_WMPNS_IWMPControls_fastReverseNative@16
_Java_WMPNS_IWMPControls_getAudioLanguageCountNative@16
_Java_WMPNS_IWMPControls_getAudioLanguageDescriptionNative@24
_Java_WMPNS_IWMPControls_getAudioLanguageIDNative@24
_Java_WMPNS_IWMPControls_getCurrentAudioLanguageIndexNative@16
_Java_WMPNS_IWMPControls_getCurrentAudioLanguageNative@16
_Java_WMPNS_IWMPControls_getCurrentItemNative@16
_Java_WMPNS_IWMPControls_getCurrentMarkerNative@16
_Java_WMPNS_IWMPControls_getCurrentPositionNative@16
_Java_WMPNS_IWMPControls_getCurrentPositionStringNative@16
_Java_WMPNS_IWMPControls_getCurrentPositionTimecodeNative@16
_Java_WMPNS_IWMPControls_getLanguageNameNative@24
_Java_WMPNS_IWMPControls_isAvailableNative@20
_Java_WMPNS_IWMPControls_nextNative@16
_Java_WMPNS_IWMPControls_pauseNative@16
_Java_WMPNS_IWMPControls_playItemNative@20
_Java_WMPNS_IWMPControls_playNative@16
_Java_WMPNS_IWMPControls_previousNative@16
_Java_WMPNS_IWMPControls_setCurrentAudioLanguageIndexNative@24
_Java_WMPNS_IWMPControls_setCurrentAudioLanguageNative@24
_Java_WMPNS_IWMPControls_setCurrentItemNative@20
_Java_WMPNS_IWMPControls_setCurrentMarkerNative@24
_Java_WMPNS_IWMPControls_setCurrentPositionNative@24
_Java_WMPNS_IWMPControls_setCurrentPositionTimecodeNative@20
_Java_WMPNS_IWMPControls_stepNative@24
_Java_WMPNS_IWMPControls_stopNative@16
_Java_WMPNS_IWMPDVD_backNative@16
_Java_WMPNS_IWMPDVD_equalsNative@20
_Java_WMPNS_IWMPDVD_getDomainNative@16
_Java_WMPNS_IWMPDVD_isAvailableNative@20
_Java_WMPNS_IWMPDVD_resumeNative@16
_Java_WMPNS_IWMPDVD_titleMenuNative@16
_Java_WMPNS_IWMPDVD_topMenuNative@16
_Java_WMPNS_IWMPErrorItem_equalsNative@20
_Java_WMPNS_IWMPErrorItem_getConditionNative@16
_Java_WMPNS_IWMPErrorItem_getCustomUrlNative@16
_Java_WMPNS_IWMPErrorItem_getErrorCodeNative@16
_Java_WMPNS_IWMPErrorItem_getErrorContextNative@16
_Java_WMPNS_IWMPErrorItem_getErrorDescriptionNative@16
_Java_WMPNS_IWMPErrorItem_getRemedyNative@16
_Java_WMPNS_IWMPError_clearErrorQueueNative@16
_Java_WMPNS_IWMPError_equalsNative@20
_Java_WMPNS_IWMPError_getErrorCountNative@16
_Java_WMPNS_IWMPError_itemNative@24
_Java_WMPNS_IWMPError_webHelpNative@16
_Java_WMPNS_IWMPMediaCollection_addNative@20
_Java_WMPNS_IWMPMediaCollection_equalsNative@20
_Java_WMPNS_IWMPMediaCollection_getAllNative@16
_Java_WMPNS_IWMPMediaCollection_getAttributeStringCollectionNative@24
_Java_WMPNS_IWMPMediaCollection_getByAlbumNative@20
_Java_WMPNS_IWMPMediaCollection_getByAttributeNative@24
_Java_WMPNS_IWMPMediaCollection_getByAuthorNative@20
_Java_WMPNS_IWMPMediaCollection_getByGenreNative@20
_Java_WMPNS_IWMPMediaCollection_getByNameNative@20
_Java_WMPNS_IWMPMediaCollection_getMediaAtomNative@20
_Java_WMPNS_IWMPMediaCollection_isDeletedNative@20
_Java_WMPNS_IWMPMediaCollection_removeNative@24
_Java_WMPNS_IWMPMediaCollection_setDeletedNative@24
_Java_WMPNS_IWMPMedia_equalsNative@20
_Java_WMPNS_IWMPMedia_getAttributeCountByTypeNative@24
_Java_WMPNS_IWMPMedia_getAttributeCountNative@16
_Java_WMPNS_IWMPMedia_getAttributeNameNative@24
_Java_WMPNS_IWMPMedia_getDurationNative@16
_Java_WMPNS_IWMPMedia_getDurationStringNative@16
_Java_WMPNS_IWMPMedia_getErrorNative@16
_Java_WMPNS_IWMPMedia_getImageSourceHeightNative@16
_Java_WMPNS_IWMPMedia_getImageSourceWidthNative@16
_Java_WMPNS_IWMPMedia_getItemInfoByAtomNative@24
_Java_WMPNS_IWMPMedia_getItemInfoByTypeNative@32
_Java_WMPNS_IWMPMedia_getItemInfoNative@20
_Java_WMPNS_IWMPMedia_getMarkerCountNative@16
_Java_WMPNS_IWMPMedia_getMarkerNameNative@24
_Java_WMPNS_IWMPMedia_getMarkerTimeNative@24
_Java_WMPNS_IWMPMedia_getNameNative@16
_Java_WMPNS_IWMPMedia_getSourceURLNative@16
_Java_WMPNS_IWMPMedia_isIdenticalNative@20
_Java_WMPNS_IWMPMedia_isMemberOfNative@20
_Java_WMPNS_IWMPMedia_isReadOnlyItemNative@20
_Java_WMPNS_IWMPMedia_setItemInfoNative@24
_Java_WMPNS_IWMPMedia_setNameNative@20
_Java_WMPNS_IWMPNetwork_equalsNative@20
_Java_WMPNS_IWMPNetwork_getBandWidthNative@16
_Java_WMPNS_IWMPNetwork_getBitRateNative@16
_Java_WMPNS_IWMPNetwork_getBufferingCountNative@16
_Java_WMPNS_IWMPNetwork_getBufferingProgressNative@16
_Java_WMPNS_IWMPNetwork_getBufferingTimeNative@16
_Java_WMPNS_IWMPNetwork_getDownloadProgressNative@16
_Java_WMPNS_IWMPNetwork_getEncodedFrameRateNative@16
_Java_WMPNS_IWMPNetwork_getFrameRateNative@16
_Java_WMPNS_IWMPNetwork_getFramesSkippedNative@16
_Java_WMPNS_IWMPNetwork_getLostPacketsNative@16
_Java_WMPNS_IWMPNetwork_getMaxBandwidthNative@16
_Java_WMPNS_IWMPNetwork_getMaxBitRateNative@16
_Java_WMPNS_IWMPNetwork_getProxyBypassForLocalNative@20
_Java_WMPNS_IWMPNetwork_getProxyExceptionListNative@20
_Java_WMPNS_IWMPNetwork_getProxyNameNative@20
_Java_WMPNS_IWMPNetwork_getProxyPortNative@20
_Java_WMPNS_IWMPNetwork_getProxySettingsNative@20
_Java_WMPNS_IWMPNetwork_getReceivedPacketsNative@16
_Java_WMPNS_IWMPNetwork_getReceptionQualityNative@16
_Java_WMPNS_IWMPNetwork_getRecoveredPacketsNative@16
_Java_WMPNS_IWMPNetwork_getSourceProtocolNative@16
_Java_WMPNS_IWMPNetwork_setBufferingTimeNative@24
_Java_WMPNS_IWMPNetwork_setMaxBandwidthNative@24
_Java_WMPNS_IWMPNetwork_setProxyBypassForLocalNative@24
_Java_WMPNS_IWMPNetwork_setProxyExceptionListNative@24
_Java_WMPNS_IWMPNetwork_setProxyNameNative@24
_Java_WMPNS_IWMPNetwork_setProxyPortNative@28
_Java_WMPNS_IWMPNetwork_setProxySettingsNative@28
_Java_WMPNS_IWMPPlayerApplication_equalsNative@20
_Java_WMPNS_IWMPPlayerApplication_getHasDisplayNative@16
_Java_WMPNS_IWMPPlayerApplication_getPlayerDockedNative@16
_Java_WMPNS_IWMPPlayerApplication_switchToControlNative@16
_Java_WMPNS_IWMPPlayerApplication_switchToPlayerApplicationNative@16
_Java_WMPNS_IWMPPlayer_closeNative@16
_Java_WMPNS_IWMPPlayer_equalsNative@20
_Java_WMPNS_IWMPPlayer_getCdromCollectionNative@16
_Java_WMPNS_IWMPPlayer_getClosedCaptionNative@16
_Java_WMPNS_IWMPPlayer_getControlsNative@16
_Java_WMPNS_IWMPPlayer_getCurrentMediaNative@16
_Java_WMPNS_IWMPPlayer_getCurrentPlaylistNative@16
_Java_WMPNS_IWMPPlayer_getDvdNative@16
_Java_WMPNS_IWMPPlayer_getEnableContextMenuNative@16
_Java_WMPNS_IWMPPlayer_getEnabledNative@16
_Java_WMPNS_IWMPPlayer_getErrorNative@16
_Java_WMPNS_IWMPPlayer_getFullScreenNative@16
_Java_WMPNS_IWMPPlayer_getIsOnlineNative@16
_Java_WMPNS_IWMPPlayer_getIsRemoteNative@16
_Java_WMPNS_IWMPPlayer_getMediaCollectionNative@16
_Java_WMPNS_IWMPPlayer_getNetworkNative@16
_Java_WMPNS_IWMPPlayer_getOpenStateNative@16
_Java_WMPNS_IWMPPlayer_getPlayStateNative@16
_Java_WMPNS_IWMPPlayer_getPlayerApplicationNative@16
_Java_WMPNS_IWMPPlayer_getPlaylistCollectionNative@16
_Java_WMPNS_IWMPPlayer_getSettingsNative@16
_Java_WMPNS_IWMPPlayer_getStatusNative@16
_Java_WMPNS_IWMPPlayer_getStretchToFitNative@16
_Java_WMPNS_IWMPPlayer_getURLNative@16
_Java_WMPNS_IWMPPlayer_getUiModeNative@16
_Java_WMPNS_IWMPPlayer_getVersionInfoNative@16
_Java_WMPNS_IWMPPlayer_getWindowlessVideoNative@16
_Java_WMPNS_IWMPPlayer_launchURLNative@20
_Java_WMPNS_IWMPPlayer_newMediaNative@20
_Java_WMPNS_IWMPPlayer_newPlaylistNative@24
_Java_WMPNS_IWMPPlayer_openPlayerNative@20
_Java_WMPNS_IWMPPlayer_setCurrentMediaNative@20
_Java_WMPNS_IWMPPlayer_setCurrentPlaylistNative@20
_Java_WMPNS_IWMPPlayer_setEnableContextMenuNative@20
_Java_WMPNS_IWMPPlayer_setEnabledNative@20
_Java_WMPNS_IWMPPlayer_setFullScreenNative@20
_Java_WMPNS_IWMPPlayer_setStretchToFitNative@20
_Java_WMPNS_IWMPPlayer_setURLNative@20
_Java_WMPNS_IWMPPlayer_setUiModeNative@20
_Java_WMPNS_IWMPPlayer_setWindowlessVideoNative@20
_Java_WMPNS_IWMPPlaylistArray_equalsNative@20
_Java_WMPNS_IWMPPlaylistArray_getCountNative@16
_Java_WMPNS_IWMPPlaylistArray_itemNative@24
_Java_WMPNS_IWMPPlaylistCollection_equalsNative@20
_Java_WMPNS_IWMPPlaylistCollection_getAllNative@16
_Java_WMPNS_IWMPPlaylistCollection_getByNameNative@20
_Java_WMPNS_IWMPPlaylistCollection_importPlaylistNative@20
_Java_WMPNS_IWMPPlaylistCollection_isDeletedNative@20
_Java_WMPNS_IWMPPlaylistCollection_newPlaylistNative@20
_Java_WMPNS_IWMPPlaylistCollection_removeNative@20
_Java_WMPNS_IWMPPlaylistCollection_setDeletedNative@24
_Java_WMPNS_IWMPPlaylist_appendItemNative@20
_Java_WMPNS_IWMPPlaylist_clearNative@16
_Java_WMPNS_IWMPPlaylist_equalsNative@20
_Java_WMPNS_IWMPPlaylist_getAttributeCountNative@16
_Java_WMPNS_IWMPPlaylist_getAttributeNameNative@24
_Java_WMPNS_IWMPPlaylist_getCountNative@16
_Java_WMPNS_IWMPPlaylist_getItemInfoNative@20
_Java_WMPNS_IWMPPlaylist_getNameNative@16
_Java_WMPNS_IWMPPlaylist_insertItemNative@28
_Java_WMPNS_IWMPPlaylist_isIdenticalNative@20
_Java_WMPNS_IWMPPlaylist_itemNative@24
_Java_WMPNS_IWMPPlaylist_moveItemNative@32
_Java_WMPNS_IWMPPlaylist_removeItemNative@20
_Java_WMPNS_IWMPPlaylist_setItemInfoNative@24
_Java_WMPNS_IWMPPlaylist_setNameNative@20
_Java_WMPNS_IWMPSettings_equalsNative@20
_Java_WMPNS_IWMPSettings_getAutoStartNative@16
_Java_WMPNS_IWMPSettings_getBalanceNative@16
_Java_WMPNS_IWMPSettings_getBaseURLNative@16
_Java_WMPNS_IWMPSettings_getDefaultAudioLanguageNative@16
_Java_WMPNS_IWMPSettings_getDefaultFrameNative@16
_Java_WMPNS_IWMPSettings_getEnableErrorDialogsNative@16
_Java_WMPNS_IWMPSettings_getInvokeURLsNative@16
_Java_WMPNS_IWMPSettings_getMediaAccessRightsNative@16
_Java_WMPNS_IWMPSettings_getModeNative@20
_Java_WMPNS_IWMPSettings_getMuteNative@16
_Java_WMPNS_IWMPSettings_getPlayCountNative@16
_Java_WMPNS_IWMPSettings_getRateNative@16
_Java_WMPNS_IWMPSettings_getVolumeNative@16
_Java_WMPNS_IWMPSettings_isAvailableNative@20
_Java_WMPNS_IWMPSettings_requestMediaAccessRightsNative@20
_Java_WMPNS_IWMPSettings_setAutoStartNative@20
_Java_WMPNS_IWMPSettings_setBalanceNative@24
_Java_WMPNS_IWMPSettings_setBaseURLNative@20
_Java_WMPNS_IWMPSettings_setDefaultFrameNative@20
_Java_WMPNS_IWMPSettings_setEnableErrorDialogsNative@20
_Java_WMPNS_IWMPSettings_setInvokeURLsNative@20
_Java_WMPNS_IWMPSettings_setModeNative@24
_Java_WMPNS_IWMPSettings_setMuteNative@20
_Java_WMPNS_IWMPSettings_setPlayCountNative@24
_Java_WMPNS_IWMPSettings_setRateNative@24
_Java_WMPNS_IWMPSettings_setVolumeNative@24
_Java_WMPNS_IWMPStringCollection_equalsNative@20
_Java_WMPNS_IWMPStringCollection_getCountNative@16
_Java_WMPNS_IWMPStringCollection_itemNative@24
_Java_WMPNS_WMP_debug@12
_Java_WMPNS_WMP_getAppletHWND@8
_Java_WMPNS_WMP_getPlayer@12
_Java_WMPNS_WMP_getTargetHWND@12
_Java_WMPNS_WMP_killThread@12
_Java_WMPNS_WMP_spawnThread@16
Sections
.text Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ