dprmioudrvbler
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_29df141d669bb6ae6da6c6a3b2b2d1e8f3c3d926b5073d86c856a2e29ff41073.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_29df141d669bb6ae6da6c6a3b2b2d1e8f3c3d926b5073d86c856a2e29ff41073
-
Size
432KB
-
MD5
e53655871d5ea1f932e09877c0e841d3
-
SHA1
697be249dc71f1cefa968659f49f356afd6a9e37
-
SHA256
29df141d669bb6ae6da6c6a3b2b2d1e8f3c3d926b5073d86c856a2e29ff41073
-
SHA512
a647048363c6bb42bda8f3e3209ab8c15a8066a62e83b72de536f78963445e7d2578cdb1c41c1852857af60bb40d1858490342e3ef339ac3149290695399f8e5
-
SSDEEP
6144:jXcjd3EK6oQKOKQKmCHdD3Dz9zRB9eB9xi0Ktx5tno6It6hSh/cuqg4k4:j+TZtneXxi0Kdq95jk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_29df141d669bb6ae6da6c6a3b2b2d1e8f3c3d926b5073d86c856a2e29ff41073
Files
-
JaffaCakes118_29df141d669bb6ae6da6c6a3b2b2d1e8f3c3d926b5073d86c856a2e29ff41073.dll windows:5 windows x86 arch:x86
7f9ded9e3981e5096a4919094f666645
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
winmm
midiInPrepareHeader
esent
JetGetBookmark
wininet
InternetSetStatusCallback
oleaut32
VarBstrFromR4
comdlg32
ReplaceTextW
ole32
OleIsRunning
comctl32
PropertySheetW
advapi32
RegEnumKeyA
SaferIdentifyLevel
kernel32
GetComputerNameW
GetProfileSectionA
GetProfileStringA
CreateFileW
GetModuleFileNameW
GetModuleHandleW
user32
GetMonitorInfoW
GetWindowPlacement
msvcrt
memset
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ