Direct3DCreate9
Static task
static1
Behavioral task
behavioral1
Sample
780bd49dbbf277de4353e782b44c9903_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
780bd49dbbf277de4353e782b44c9903_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
780bd49dbbf277de4353e782b44c9903_JaffaCakes118
-
Size
726KB
-
MD5
780bd49dbbf277de4353e782b44c9903
-
SHA1
a429afd6188699d8ea2b73f6b4da0ad10a106d18
-
SHA256
9dbcdcc44150cf7e0bf4532965a1d26b32ebd87b7fbf0eeb427b13b822dc3804
-
SHA512
896a5c29f13e43ead10d9ff5a4b1d77206e5abf12c1bdfbec0866c9329d289aa18b9234cb5caf23dc64383e05f24e6a02adda6d61f8616fb3f58f366d070001a
-
SSDEEP
12288:Mo6LL6KAl1KPpX//x3QVvCEFrBXV0iefM8IxHNQ5:06KFpX/ZG6EFpV0DM1xHN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 780bd49dbbf277de4353e782b44c9903_JaffaCakes118
Files
-
780bd49dbbf277de4353e782b44c9903_JaffaCakes118.dll windows:5 windows x86 arch:x86
6f5a9e6d434e5f29b7d8ccdf93fd9d6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
d3dx9_40
D3DXMatrixInverse
D3DXMatrixTransformation2D
D3DXCreateTextureFromFileA
D3DXCreateSprite
D3DXAssembleShader
kernel32
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
WriteProcessMemory
ReadProcessMemory
GetLastError
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryA
GetLocalTime
FreeLibrary
SetUnhandledExceptionFilter
DisableThreadLibraryCalls
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetStringTypeW
CreateFileA
SetStdHandle
SetFilePointer
HeapSize
LoadLibraryW
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringW
WideCharToMultiByte
GetProcAddress
VirtualQuery
GetCurrentProcess
CreateFileW
FlushInstructionCache
OutputDebugStringA
Sleep
MultiByteToWideChar
VirtualProtect
WriteConsoleW
SetEndOfFile
GetProcessHeap
GetStartupInfoW
GetFileType
DecodePointer
EncodePointer
RtlUnwind
RaiseException
HeapFree
HeapReAlloc
HeapAlloc
GetCurrentThreadId
GetCommandLineA
WriteFile
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
IsProcessorFeaturePresent
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
EnterCriticalSection
LeaveCriticalSection
ReadFile
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
DeleteCriticalSection
user32
MessageBoxA
GetCursorPos
ScreenToClient
GetKeyState
SetCursor
SetWindowPos
GetClientRect
GetAsyncKeyState
GetSystemMetrics
MoveWindow
FillRect
MapVirtualKeyA
CallWindowProcA
GetForegroundWindow
SetWindowLongA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
gdi32
SetTextAlign
CreateCompatibleDC
CreateDIBSection
SetMapMode
GetDeviceCaps
CreateFontA
DeleteObject
DeleteDC
SelectObject
CreateSolidBrush
SetBkMode
GetTextExtentPoint32A
ExtTextOutA
SetTextColor
shell32
ShellExecuteA
Exports
Exports
Sections
.text Size: 341KB - Virtual size: 341KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 211KB - Virtual size: 873KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d3d9_sh Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ