GetThumbnailFromExifTiff
Static task
static1
Behavioral task
behavioral1
Sample
a8fa98b4285c1ede1941c9207609585b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8fa98b4285c1ede1941c9207609585b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a8fa98b4285c1ede1941c9207609585b_JaffaCakes118
-
Size
236KB
-
MD5
a8fa98b4285c1ede1941c9207609585b
-
SHA1
a79ac9fb91bbe40030658a83b5de5f16db8b4796
-
SHA256
477a29851b13eafd401c7d16dd5aba5cc07245e2f28a2a62d89ba9fadbfeedc7
-
SHA512
15197f9e0431542247d282a64002b109f66baae67c5512aaeb568463c61ef9efa32d4473313809319d3cb29e1a188f022740afe4974114ce1ba35377882dadad
-
SSDEEP
3072:iA7OEunqT5qaeFnS8ob/FPr7m2IDMmdLDs7EGvgZNff2LDO2s6da7cLBswq98BGF:nOZqyFtoZPckp6V2G2VaYawqy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8fa98b4285c1ede1941c9207609585b_JaffaCakes118
Files
-
a8fa98b4285c1ede1941c9207609585b_JaffaCakes118.dll windows:4 windows x86 arch:x86
69331320e6ad18b22a514de533126bfa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
ExitProcess
ExpandEnvironmentStringsA
FileTimeToSystemTime
GetACP
GetCommandLineA
GetConsoleCP
GetCurrentProcessId
GetExitCodeThread
GetFileAttributesA
GetModuleHandleA
GetProcessHeap
GetSystemInfo
GetVersionExA
GlobalAlloc
HeapAlloc
HeapCreate
HeapDestroy
InitializeCriticalSection
LeaveCriticalSection
LocalAlloc
OpenEventA
ReadFile
ReadProcessMemory
UnmapViewOfFile
WaitForMultipleObjects
lstrcmpA
lstrcpynA
lstrlenA
advapi32
ChangeServiceConfigA
CreateServiceW
InitializeSecurityDescriptor
LookupSecurityDescriptorPartsW
QueryServiceConfig2W
msvcrt
exit
__set_app_type
vswprintf
__p__fmode
__p__commode
strspn
sscanf
rand
__getmainargs
fwprintf
ole32
IsEqualGUID
CoGetApartmentID
CreateDataCache
ddraw
DirectDrawEnumerateExA
DirectDrawEnumerateA
DirectDrawCreate
GetSurfaceFromDC
crypt32
CertRegisterSystemStore
CryptBinaryToStringW
CryptMemFree
CertCreateCRLContext
Exports
Exports
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ