D:\qb\workspace\5216\p4gen\gfx_Development\Source_OCL\bin\Release\Win32\igdfcl32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3ffc1387bd707f348c76d82037da654d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3ffc1387bd707f348c76d82037da654d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
3ffc1387bd707f348c76d82037da654d_JaffaCakes118
-
Size
19.1MB
-
MD5
3ffc1387bd707f348c76d82037da654d
-
SHA1
f1575d904fa5f10fa317aa59fd803d3f6475e7a5
-
SHA256
1cdc9f1f78ac71081aa3aff533a2615b3d3233e9d81043abbbce765f7c38e6cc
-
SHA512
01cb98bf8970511fa6f49f8216b2f6a90793fbd73e0181ae1c2bfd06954cb6efff03a9307561cc1d035e606cfca8bf0f7b461361f29482f1243dc5870d41ebe4
-
SSDEEP
393216:blZvbnmpGfqL/9kosIxje6ENH7X0fkus00xTEg:blZ7mpGiLKosIxy6El0D01
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ffc1387bd707f348c76d82037da654d_JaffaCakes118
Files
-
3ffc1387bd707f348c76d82037da654d_JaffaCakes118.dll windows:6 windows x86 arch:x86
12b634bb49f9ec63eda9fc7fa52e0603
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
DeleteCriticalSection
GetFullPathNameW
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
GetCurrentDirectoryA
CreateDirectoryA
CreateFileA
DeleteFileA
FindClose
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFileAttributesExA
GetFileInformationByHandle
GetFullPathNameA
ReadFile
RemoveDirectoryA
SetFileAttributesA
CloseHandle
GetLastError
SetLastError
QueryPerformanceCounter
GetCurrentProcessId
GetModuleFileNameA
LocalFree
FormatMessageA
GetTempPathA
MoveFileExA
WaitForSingleObject
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
GetTempPathW
Sleep
GetSystemInfo
VirtualQuery
MapViewOfFile
UnmapViewOfFile
GetModuleHandleA
CreateFileMappingA
CopyFileW
MoveFileExW
CreateHardLinkW
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
SetErrorMode
GetCurrentProcess
GetCurrentThread
SetConsoleCtrlHandler
GetStdHandle
GetProcessTimes
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetConsoleMode
SearchPathA
DuplicateHandle
TerminateProcess
GetExitCodeProcess
CreateProcessA
CreateJobObjectA
AssignProcessToJobObject
SetInformationJobObject
GetModuleHandleExA
LoadResource
LockResource
SizeofResource
FindResourceA
EncodePointer
DecodePointer
GetStringTypeW
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetCurrentThreadId
RaiseException
IsProcessorFeaturePresent
IsDebuggerPresent
CreateThread
ExitThread
LoadLibraryExW
HeapReAlloc
FileTimeToLocalFileTime
GetFileType
PeekNamedPipe
FileTimeToSystemTime
SetEndOfFile
GetProcessHeap
SetStdHandle
InitializeCriticalSectionAndSpinCount
HeapValidate
HeapWalk
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetCPInfo
UnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
WriteFile
GetModuleFileNameW
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
GetConsoleCP
SetFilePointerEx
FlushFileBuffers
FindFirstFileExW
GetDriveTypeW
SetFilePointer
OutputDebugStringW
LoadLibraryW
SetEnvironmentVariableA
ReadConsoleW
WriteConsoleW
InitializeCriticalSection
dbghelp
EnumerateLoadedModules
SymGetSymFromAddr64
SymInitialize
SymGetLineFromAddr64
SymGetModuleBase64
SymFunctionTableAccess64
SymSetOptions
StackWalk64
advapi32
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
Exports
Exports
Create
Delete
GetKernelArgsInfo
Register
ReleaseKernelArgsInfo
Sections
.text Size: 8.7MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8.7MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 362KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ