Direct3DCreate9
Static task
static1
Behavioral task
behavioral1
Sample
b00e849a46bf8f2016c90ccc0c2a5c60_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b00e849a46bf8f2016c90ccc0c2a5c60_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b00e849a46bf8f2016c90ccc0c2a5c60_JaffaCakes118
-
Size
192KB
-
MD5
b00e849a46bf8f2016c90ccc0c2a5c60
-
SHA1
16aa955c77ef3db3571f7156b26c209a9cf954aa
-
SHA256
d829f2cc39549a9bb8593426dbb301385193b3fa932bdd1d5b1b3a6569733955
-
SHA512
47ee626c3d09b17b68cf239a6641325d9221751db307fa9a3f3d6edae99551731c4aff58cc8c3bb2cf492444326f947ff7cf7956aeeaa2f67220909b45b3643a
-
SSDEEP
3072:pMFCnqlTM231nyaxXqzqdvd2BEpjcuhUtCNnMSiZqzHoJ9IlyC:pMFpTM2FnyaZq2dvd2BEpj0YeEHcC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b00e849a46bf8f2016c90ccc0c2a5c60_JaffaCakes118
Files
-
b00e849a46bf8f2016c90ccc0c2a5c60_JaffaCakes118.dll windows:4 windows x86 arch:x86
cbc58f8be6497cac66e46eac93ed9a92
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetModuleFileNameA
DisableThreadLibraryCalls
VirtualProtect
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsBadWritePtr
IsBadReadPtr
HeapValidate
RtlUnwind
GetCommandLineA
GetVersion
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CreateFileA
DebugBreak
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
ExitProcess
TerminateProcess
GetCurrentProcess
FatalAppExitA
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
GetModuleHandleA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
SetEndOfFile
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
Sleep
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Exports
Exports
Sections
.text Size: 160KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ