Static task
static1
Behavioral task
behavioral1
Sample
Driver Detective 6.2.5.0/Driver Detective 6.2.5.0.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Driver Detective 6.2.5.0/Driver Detective 6.2.5.0.exe
Resource
win10v2004-20240709-en
General
-
Target
445bd186acaf4e1520527704aa0c3941_JaffaCakes118
-
Size
3.3MB
-
MD5
445bd186acaf4e1520527704aa0c3941
-
SHA1
a33f46e42a88ede54c07150e65ca23e92ca34614
-
SHA256
d9877279f34ca09114d47ef3ffd701aadc1681a1677b26f9891736e85bb38a0f
-
SHA512
2173cf5fc7ab4949a56d11dd9fc7dba1c50339a500ff5f51f3aa30b765aee76fbfd74cfa8cf7c5d7a8e99d86224e97d8182baa6e0611b4a50ce486f6e2d3e134
-
SSDEEP
98304:vyKyMFxkDADvuFl95QaZYeEumSWDJFGr1wNfCmZ1FA0Xhm:vyKyMFxkovuN5RZYumRDJFa1wNfxjFAr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Driver Detective 6.2.5.0/Driver Detective 6.2.5.0.exe
Files
-
445bd186acaf4e1520527704aa0c3941_JaffaCakes118.rar
-
Driver Detective 6.2.5.0/--READ ME--.txt
-
Driver Detective 6.2.5.0/Driver Detective 6.2.5.0.exe.exe windows:4 windows x86 arch:x86
2bd16f347717a84e73a4892445099aff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord666
ord595
ord631
ord632
ord526
ord527
DllFunctionCall
ord563
__vbaExceptHandler
ord711
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100
ord616
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Driver Detective 6.2.5.0/How to Crack.txt
-
Driver Detective 6.2.5.0/dd.lic