c:\projects\drivers\ccdriver_combinedmode\Builds\bin\fre_nokia\fre\i386\nmwcdcls.pdb
Static task
static1
Behavioral task
behavioral1
Sample
addd301f9f540e5c53debe1583c83531_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
addd301f9f540e5c53debe1583c83531_JaffaCakes118
-
Size
225KB
-
MD5
addd301f9f540e5c53debe1583c83531
-
SHA1
99456504ffcee5871464cd86edf5ff0d6ec8d086
-
SHA256
e651386e64f17f639faac3b02792cd49bf0846d0e4e17bd4e1ac7aa2e2a49ec9
-
SHA512
98940ba38121bc60834da2c9c215365fbe3f6dce58bebc5a4a6f1d5bb6c8cfccc53348ebe77a7f5caac798bb3bd87d9fd40634b97c0a87f4c4ec765f7eea440d
-
SSDEEP
3072:9aLFJiypf1imdn6qCqvEP/jawuZ0S6kA6GAQiATtw6uwx38YAy2y0h4cCiVXnXY5:eFNpdn6d/ed0SRdATt3XMoDEnEl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource addd301f9f540e5c53debe1583c83531_JaffaCakes118
Files
-
addd301f9f540e5c53debe1583c83531_JaffaCakes118.dll windows:6 windows x86 arch:x86
d2f409823a3eba285eacc58046238afd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
setupapi
SetupDiEnumDriverInfoW
SetupDiGetDriverInstallParamsW
SetupDiGetDriverInfoDetailW
SetupDiSetDeviceRegistryPropertyW
CM_Get_Parent
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
CM_Get_Device_ID_Size
CM_Get_Device_IDW
SetupDiSetDriverInstallParamsW
kernel32
VirtualQuery
GetSystemInfo
VirtualProtect
DisableThreadLibraryCalls
GetVersionExW
GetLastError
GetCommandLineA
GetVersionExA
RaiseException
RtlUnwind
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
OutputDebugStringA
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
LoadLibraryExA
InitializeCriticalSection
Sleep
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
comctl32
ord17
Exports
Exports
WMCClassInstaller
WMCModemCoInstaller
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE