GetPlugin
Static task
static1
Behavioral task
behavioral1
Sample
746837f5a1f7c2c2f49b8076f5160d45_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
746837f5a1f7c2c2f49b8076f5160d45_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
746837f5a1f7c2c2f49b8076f5160d45_JaffaCakes118
-
Size
2.4MB
-
MD5
746837f5a1f7c2c2f49b8076f5160d45
-
SHA1
c0656c5415da36eb442266a26d42f72a2ef6b933
-
SHA256
1d670abd09f7b158b8c97f027b83154712ad792f6d197145941edc7966a398d5
-
SHA512
206645256924b68d1a454b345f0ff9a3722069a5401735156c2c03c7b9e44cd79a93cbfc5964d52dc9b3274ad0a404616e3e85a28070aa84b69460074292227b
-
SSDEEP
49152:8vuebkEoNRyzIKe2DAzbJyq6zPm7KYTuMFWM4+DHffifZY:8RbDoNZKpDcbJZ7BTugv4off2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 746837f5a1f7c2c2f49b8076f5160d45_JaffaCakes118
Files
-
746837f5a1f7c2c2f49b8076f5160d45_JaffaCakes118.dll windows:4 windows x86 arch:x86
268b587d81993d5b656645168ef3aa36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
d3d8
Direct3DCreate8
winmm
PlaySoundA
imagehlp
CheckSumMappedFile
kernel32
FindFirstFileW
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
UnregisterClassW
MessageBoxA
gdi32
SetViewportOrgEx
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegSetValueExW
shell32
SHFileOperationA
shlwapi
PathFindFileNameW
oledlg
OleUIBusyW
ole32
OleUninitialize
oleaut32
SysFreeString
ws2_32
WSAStartup
gdiplus
GdipDrawImageRectI
Exports
Exports
Sections
.text Size: - Virtual size: 879KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ