General

Malware Config

Signatures

Files

• 90d39f9ec98db742751322a9a5548598_JaffaCakes118

  .dll windows:5 windows x64 arch:x64

  a23d507241571c69f1f380438b3a251c

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  dpamnlrd.pdb

  Imports

  comdlg32

  GetFileTitleW

  advapi32

  DecryptFileW

  LookupAccountSidA

  DeregisterEventSource

  GetSecurityDescriptorSacl

  user32

  DrawStateW

  InsertMenuW

  DrawTextA

  DrawIconEx

  kernel32

  GetCurrentThread

  GetEnvironmentStringsW

  GetThreadId

  GetPrivateProfileStringW

  FillConsoleOutputCharacterA

  GetCommProperties

  GetThreadTimes

  DebugActiveProcess

  GlobalDeleteAtom

  lstrcmpiW

  VirtualAlloc

  GetNLSVersion

  GetLastError

  LoadLibraryA

  ConvertDefaultLocale

  DeleteTimerQueueTimer

  FreeResource

  gdi32

  GetTextExtentExPointI

  GetViewportOrgEx

  GetCharWidthW

  GetWindowExtEx

  GetSystemPaletteEntries

  GetCharWidth32A

  DeleteEnhMetaFile

  Exports

  Exports

  CloseDriver

  DefDriverProc

  DriverCallback

  DrvGetModuleHandle

  GetDriverModuleHandle

  OpenDriver

  PlaySound

  PlaySoundA

  PlaySoundW

  SendDriverMessage

  WOWAppExit

  auxGetDevCapsA

  auxGetDevCapsW

  auxGetNumDevs

  auxGetVolume

  auxOutMessage

  auxSetVolume

  joyConfigChanged

  joyGetDevCapsA

  joyGetDevCapsW

  joyGetNumDevs

  joyGetPos

  joyGetPosEx

  joyGetThreshold

  joyReleaseCapture

  joySetCapture

  joySetThreshold

  mciDriverNotify

  mciDriverYield

  mciExecute

  mciFreeCommandResource

  mciGetCreatorTask

  mciGetDeviceIDA

  mciGetDeviceIDFromElementIDA

  mciGetDeviceIDFromElementIDW

  mciGetDeviceIDW

  mciGetDriverData

  mciGetErrorStringA

  mciGetErrorStringW

  mciGetYieldProc

  mciLoadCommandResource

  mciSendCommandA

  mciSendCommandW

  mciSendStringA

  mciSendStringW

  mciSetDriverData

  mciSetYieldProc

  midiConnect

  midiDisconnect

  midiInAddBuffer

  midiInClose

  midiInGetDevCapsA

  midiInGetDevCapsW

  midiInGetErrorTextA

  midiInGetErrorTextW

  midiInGetID

  midiInGetNumDevs

  midiInMessage

  midiInOpen

  midiInPrepareHeader

  midiInReset

  midiInStart

  midiInStop

  midiInUnprepareHeader

  midiOutCacheDrumPatches

  midiOutCachePatches

  midiOutClose

  midiOutGetDevCapsA

  midiOutGetDevCapsW

  midiOutGetErrorTextA

  midiOutGetErrorTextW

  midiOutGetID

  midiOutGetNumDevs

  midiOutGetVolume

  midiOutLongMsg

  midiOutMessage

  midiOutOpen

  midiOutPrepareHeader

  midiOutReset

  midiOutSetVolume

  midiOutShortMsg

  midiOutUnprepareHeader

  midiStreamClose

  midiStreamOpen

  midiStreamOut

  midiStreamPause

  midiStreamPosition

  midiStreamProperty

  midiStreamRestart

  midiStreamStop

  mixerClose

  mixerGetControlDetailsA

  mixerGetControlDetailsW

  mixerGetDevCapsA

  mixerGetDevCapsW

  mixerGetID

  mixerGetLineControlsA

  mixerGetLineControlsW

  mixerGetLineInfoA

  mixerGetLineInfoW

  mixerGetNumDevs

  mixerMessage

  mixerOpen

  mixerSetControlDetails

  mmDrvInstall

  mmGetCurrentTask

  mmTaskBlock

  mmTaskCreate

  mmTaskSignal

  mmTaskYield

  mmioAdvance

  mmioAscend

  mmioClose

  mmioCreateChunk

  mmioDescend

  mmioFlush

  mmioGetInfo

  mmioInstallIOProcA

  mmioInstallIOProcW

  mmioOpenA

  mmioOpenW

  mmioRead

  mmioRenameA

  mmioRenameW

  mmioSeek

  mmioSendMessage

  mmioSetBuffer

  mmioSetInfo

  mmioStringToFOURCCA

  mmioStringToFOURCCW

  mmioWrite

  mmsystemGetVersion

  sndPlaySoundA

  sndPlaySoundW

  timeBeginPeriod

  timeEndPeriod

  timeGetDevCaps

  timeGetSystemTime

  timeGetTime

  timeKillEvent

  timeSetEvent

  waveInAddBuffer

  waveInClose

  waveInGetDevCapsA

  waveInGetDevCapsW

  waveInGetErrorTextA

  waveInGetErrorTextW

  waveInGetID

  waveInGetNumDevs

  waveInGetPosition

  waveInMessage

  waveInOpen

  waveInPrepareHeader

  waveInReset

  waveInStart

  waveInStop

  waveInUnprepareHeader

  waveOutBreakLoop

  waveOutClose

  waveOutGetDevCapsA

  waveOutGetDevCapsW

  waveOutGetErrorTextA

  waveOutGetErrorTextW

  waveOutGetID

  waveOutGetNumDevs

  waveOutGetPitch

  waveOutGetPlaybackRate

  waveOutGetPosition

  waveOutGetVolume

  waveOutMessage

  waveOutOpen

  waveOutPause

  waveOutPrepareHeader

  waveOutReset

  waveOutRestart

  waveOutSetPitch

  waveOutSetPlaybackRate

  waveOutSetVolume

  waveOutUnprepareHeader

  waveOutWrite

  Sections

  .text

  Size: 912KB - Virtual size: 911KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 66KB - Virtual size: 66KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 976B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 888B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 318B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 318B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ