GetThumbnailFromExifTiff
Static task
static1
Behavioral task
behavioral1
Sample
bd8cb250e3f9dc76a27a50701cbc852b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd8cb250e3f9dc76a27a50701cbc852b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bd8cb250e3f9dc76a27a50701cbc852b_JaffaCakes118
-
Size
232KB
-
MD5
bd8cb250e3f9dc76a27a50701cbc852b
-
SHA1
7f9afeba9653e81c67a8deadc156f16d931033f9
-
SHA256
3cd084370b95da3c005bc215980e0045532d26b7364c35286a1000184cd723aa
-
SHA512
6783a29cdd44e829f3df29cf419d43c22214e5fff69fa10f05903cc170dcbcbd4488b5cbe74646b0b4058c0513ba3f19f1a5be338524e983273a09dbfabc1af4
-
SSDEEP
3072:ZgjEGVR4UIvvxnCf6DK8cRltQOTOX01uzJ6BoHsIXdPg0ts8SLlOyM3R+kminvhf:C5bWpU6DM0OKX01aEBJIZi/dl+JCvld
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd8cb250e3f9dc76a27a50701cbc852b_JaffaCakes118
Files
-
bd8cb250e3f9dc76a27a50701cbc852b_JaffaCakes118.dll windows:4 windows x86 arch:x86
0914af9207937de931d84e39403c4e6a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileA
FormatMessageA
FreeEnvironmentStringsW
GetCommandLineA
GetConsoleCP
GetEnvironmentVariableA
GetLocaleInfoW
GetModuleHandleA
GetStringTypeW
GetVersionExA
GlobalLock
GlobalMemoryStatus
HeapAlloc
HeapCreate
LeaveCriticalSection
MultiByteToWideChar
RtlUnwind
SetErrorMode
SetHandleCount
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
WideCharToMultiByte
lstrlenA
user32
SetTimer
SetDlgItemTextA
OffsetRect
InvalidateRect
InsertMenuA
GetMenuCheckMarkDimensions
GetKeyState
FindWindowExA
EnumChildWindows
DestroyWindow
DeferWindowPos
CreateIconIndirect
CallWindowProcA
BeginPaint
advapi32
CryptSignHashW
CreateWellKnownSid
LookupAccountSidA
LookupSecurityDescriptorPartsW
OpenEventLogA
LsaEnumerateTrustedDomainsEx
ddraw
DirectDrawCreateClipper
DSoundHelp
GetDDSurfaceLocal
DirectDrawEnumerateExW
DirectDrawEnumerateExA
ole32
CoLockObjectExternal
IsEqualGUID
CoCreateInstance
Exports
Exports
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ