C:\Users\misha\Downloads\Софт\D3D9 Stealer\D3D9 Stealer\Release\d3d9.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7958d4d24cbe3d31bd4f9102e2e8f92b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7958d4d24cbe3d31bd4f9102e2e8f92b_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
7958d4d24cbe3d31bd4f9102e2e8f92b_JaffaCakes118
-
Size
11KB
-
MD5
7958d4d24cbe3d31bd4f9102e2e8f92b
-
SHA1
ee0397c2d46044b270b571af48cf4258ea2a582b
-
SHA256
52bd9a8fb0f16bb0d7f5b8fc4dd4dca6378d60b1cdf0843683f3e5ad8ed29382
-
SHA512
638a9ee57134e561eab860b337182895d257575098973004ea56698d543b831f092eb3e96ec00ae5acb286e929e1b8b123d8b267241ddc6987cdbc489571335e
-
SSDEEP
192:SP/16hlvRHCz1rP5EHnQWe6Sgs1u+yOQWUUFZiRG+g4eR3XUn+0IMj:SP/16hJRHi1r6gYr+yOAsig+g42E+0IM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7958d4d24cbe3d31bd4f9102e2e8f92b_JaffaCakes118
Files
-
7958d4d24cbe3d31bd4f9102e2e8f92b_JaffaCakes118.dll windows:6 windows x86 arch:x86
04acc490dd5c9252642acf99366e0092
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
Sleep
VirtualQuery
FreeLibrary
GetCurrentProcess
WideCharToMultiByte
GetSystemDirectoryA
lstrlenW
FlushInstructionCache
GetProcAddress
SetFileAttributesA
DisableThreadLibraryCalls
LoadLibraryA
GetModuleFileNameA
VirtualProtect
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
DecodePointer
EncodePointer
IsProcessorFeaturePresent
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
msvcr120
free
_beginthread
??2@YAPAXI@Z
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
?terminate@@YAXXZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
_except_handler4_common
_vsnprintf_s
sprintf
??3@YAXPAX@Z
malloc
__CxxFrameHandler3
Exports
Exports
Direct3DCreate9
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d3d9_sh Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ