c:\workarea\8.951\drivers\dx\shared\mva_vhd\ave\dll\build\w7\B_rel\amdave32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_432372863c7aa90b44f17dc294e40b60.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_432372863c7aa90b44f17dc294e40b60
-
Size
126KB
-
MD5
432372863c7aa90b44f17dc294e40b60
-
SHA1
de1690809e9654c721000f4565b419c3f96d7a54
-
SHA256
b3351f60cbb7dff9684cd668e90d084eac4fd670f87dd08a1b738b604d521377
-
SHA512
9dd55712c1bcba5dd6245409b7504b774bb0645e00af54ccb1d820e84cc7b487517f5e5cb046b528daf9260fb1228dcc15666b0fa888a8097d13587341f274fd
-
SSDEEP
1536:lmXdu9dDxwwhPuBw4DhQ5gFIoXbFMFSFPsOwW/AvcXBFWC21k/:w4bhPuBwUSgqQblF3YcxFt21G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_432372863c7aa90b44f17dc294e40b60
Files
-
JaffaCakes118_432372863c7aa90b44f17dc294e40b60.dll windows:4 windows x86 arch:x86
c7fa57d8cc92dcaadc4578f866fd0688
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetVersionExA
LoadLibraryA
GetProcAddress
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
GetCommandLineA
HeapAlloc
GetLastError
HeapFree
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
OutputDebugStringA
InitializeCriticalSection
GetModuleHandleW
GetCPInfo
GetACP
GetOEMCP
Sleep
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
user32
GetDesktopWindow
dxva2
DXVA2CreateVideoService
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE