d:\p4root\dev19\out\Release\vdicmdrv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f994ac4a64d27f90e51ab11ada35df60_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
f994ac4a64d27f90e51ab11ada35df60_JaffaCakes118
-
Size
276KB
-
MD5
f994ac4a64d27f90e51ab11ada35df60
-
SHA1
68148aa1bd2a7a07808c9f2eea069a4a988c725f
-
SHA256
3978ec2c91b2bf70471612e2ae1b31b677e66c349aa43453b087578681536bbc
-
SHA512
95457625295caf889cff17dba1539d027eeaccffaec59eaa15c2d3f1b286e12ef317749189ab1127286bbd82310173e305ad4d2994b70149bf8ed99596c98573
-
SSDEEP
6144:nSfwJACHgGJT1wySZdMwgkFHQF9oJqblxATGyupqSUK:mAomwyuQbl2T5SUK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f994ac4a64d27f90e51ab11ada35df60_JaffaCakes118
Files
-
f994ac4a64d27f90e51ab11ada35df60_JaffaCakes118.dll windows:4 windows x86 arch:x86
2f03b88ab0371fb3ca034497f3692f5d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
winmm
DefDriverProc
kernel32
GetEnvironmentStrings
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringW
LCMapStringA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
RaiseException
Sleep
HeapSize
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
user32
DialogBoxParamA
EndDialog
Exports
Exports
DriverProc
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE