E:\root_obse\nvse\Release\nvse_steam_loader.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f667671bdf5170d3e25e0360817082c9_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
f667671bdf5170d3e25e0360817082c9_JaffaCakes118
-
Size
237KB
-
MD5
f667671bdf5170d3e25e0360817082c9
-
SHA1
a494e7b08af1c47e8eebe41c7d26e53befeda4d7
-
SHA256
ce013942a8e802231ad39f922cdea139ce9a737ac20c1b48517065ce5e40f206
-
SHA512
888473c8a527e441b0b126a84294d523902cc0a57b300f828825901e5558cedef1c73d809e9987ab42c60f6d3c2f1df42fd69542a3634035df1febd2290ceaaf
-
SSDEEP
3072:C+gMajJFHo/W1axo5W1Om0XxZANPIkWVHtXWKn5PMEzhRxfMGAQKKuqCabTJgrqb:PgLH01BGkP0XWQMahR6G9KDqCab1grwz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f667671bdf5170d3e25e0360817082c9_JaffaCakes118
Files
-
f667671bdf5170d3e25e0360817082c9_JaffaCakes118.dll windows:5 windows x86 arch:x86
0f3f4def8635f887474fce55cd2ae12c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
VirtualProtect
GetSystemTimeAsFileTime
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
ReadFile
CreateFileA
MapViewOfFile
UnmapViewOfFile
GetLastError
CreateFileMappingA
GetDriveTypeA
GetFullPathNameA
GetCommandLineA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapAlloc
HeapFree
Sleep
HeapSize
ExitProcess
GetCurrentDirectoryA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
user32
MessageBoxA
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE