Static task
static1
Behavioral task
behavioral1
Sample
d517f75645decd0f3b1a6605b103e245_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d517f75645decd0f3b1a6605b103e245_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d517f75645decd0f3b1a6605b103e245_JaffaCakes118
-
Size
32KB
-
MD5
d517f75645decd0f3b1a6605b103e245
-
SHA1
0b7812f14ca903b6bae61aa701316878a3992217
-
SHA256
789f6e9c6ee484d8e3df51ec10f203b933fc0b4fc85f53decdee5fd5b501bd5d
-
SHA512
f96718763a940966be6a9b63601f34cbe6c042f9fe898d1c6a1cf7edc84b61b367db166bed19cc7ff7c58023b9de52e6e81dc754fb6fc18985c26e2051b11e6e
-
SSDEEP
768:/p+t5uHbFR6lweKgq73ZT1D2+flOtSafAa:/e5uHSlwpRLZTpBlOtSaf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d517f75645decd0f3b1a6605b103e245_JaffaCakes118
Files
-
d517f75645decd0f3b1a6605b103e245_JaffaCakes118.dll windows:5 windows x86 arch:x86
62d60843afc9da59c35db0a23300ace9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ot12-openthreads
??EAtomic@OpenThreads@@QAEIXZ
osg80-osg
?getSlave@View@osg@@QBEABUSlave@12@I@Z
?unref@Referenced@osg@@QBEHXZ
??1Object@osg@@MAE@XZ
?releaseGLObjects@Object@osg@@UBEXPAVState@2@@Z
?resizeGLObjectBuffers@Object@osg@@UAEXI@Z
?getUserData@Object@osg@@UAEPAVReferenced@2@XZ
?getUserData@Object@osg@@UBEPBVReferenced@2@XZ
?setUserData@Object@osg@@UAEXPAVReferenced@2@@Z
?computeDataVariance@Object@osg@@UAEXXZ
?setName@Object@osg@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setThreadSafeRefUnref@Object@osg@@UAEX_N@Z
?makeIdentity@Matrixd@osg@@QAEXXZ
?setInternalTextureFormat@Image@osg@@QAEXH@Z
?setCamera@View@osg@@QAEXPAVCamera@2@@Z
?addSlave@View@osg@@QAE_NPAVCamera@2@_N@Z
??1Matrixd@osg@@QAE@XZ
??1Image@osg@@MAE@XZ
?getNumSlaves@View@osg@@QBEIXZ
?setFrameLastRendered@Image@osg@@UAEXPBVFrameStamp@2@@Z
?sendKeyEvent@Image@osg@@UAE_NH_N@Z
?sendPointerEvent@Image@osg@@UAE_NHHH@Z
?sendFocusHint@Image@osg@@UAE_N_N@Z
?update@Image@osg@@UAEXPAVNodeVisitor@2@@Z
?requiresUpdateCall@Image@osg@@UBE_NXZ
?notify@osg@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@W4NotifySeverity@1@@Z
?isImageTranslucent@Image@osg@@UBE_NXZ
?copySubImage@Image@osg@@UAEXHHHPBV12@@Z
?scaleImage@Image@osg@@UAEXHHHI@Z
?readImageFromCurrentTexture@Image@osg@@UAEXI_NI@Z
?readPixels@Image@osg@@UAEXHHHHII@Z
?setImage@Image@osg@@UAEXHHHHIIPAEW4AllocationMode@12@H@Z
?allocateImage@Image@osg@@UAEXHHHIIH@Z
?compare@Image@osg@@UBEHABV12@@Z
?getTotalDataSize@Image@osg@@UBEIXZ
?getDataPointer@Image@osg@@UBEPBXXZ
?releaseGLObjects@BufferData@osg@@UBEXPAVState@2@@Z
?resizeGLObjectBuffers@BufferData@osg@@UAEXI@Z
?className@Image@osg@@UBEPBDXZ
?libraryName@Image@osg@@UBEPBDXZ
?isSameKindAs@Image@osg@@UBE_NPBVObject@2@@Z
?clone@Image@osg@@UBEPAVObject@2@ABVCopyOp@2@@Z
?cloneType@Image@osg@@UBEPAVObject@2@XZ
??0Image@osg@@QAE@XZ
?getCamera@View@osg@@QBEPBVCamera@2@XZ
osg80-osgdb
??0RegisterDotOsgWrapperProxy@osgDB@@QAE@PAVObject@osg@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1P6A_NAAV23@AAVInput@1@@ZP6A_NABV23@AAVOutput@1@@ZW4ReadWriteMode@DotOsgWrapper@1@@Z
?advanceOverCurrentFieldOrBlock@FieldReaderIterator@osgDB@@QAEXXZ
??EFieldReaderIterator@osgDB@@QAEAAV01@XZ
?getFloat@Field@osgDB@@QBE_NAAN@Z
??YFieldReaderIterator@osgDB@@QAEAAV01@H@Z
?getNoNestedBrackets@Field@osgDB@@QAEHXZ
?isOpenBracket@Field@osgDB@@QBE_NXZ
?matchWord@Field@osgDB@@QBE_NPBD@Z
??AFieldReaderIterator@osgDB@@QAEAAVField@1@H@Z
?readRefImageFile@osgDB@@YA?AV?$ref_ptr@VImage@osg@@@osg@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@1@@Z
?getOptions@Registry@osgDB@@QAEPAVOptions@2@XZ
?instance@Registry@osgDB@@SAPAV12@_N@Z
?moveOut@Output@osgDB@@QAEXXZ
?moveIn@Output@osgDB@@QAEXXZ
?indent@Output@osgDB@@QAEAAV12@XZ
?read@Input@osgDB@@QAE_NVParameter@ArgumentParser@osg@@0@Z
?matchSequence@FieldReaderIterator@osgDB@@QAE_NPBD@Z
?read@Input@osgDB@@QAE_NPBDVParameter@ArgumentParser@osg@@111@Z
?read@Input@osgDB@@QAE_NPBDVParameter@ArgumentParser@osg@@1111@Z
?read@Input@osgDB@@QAE_NPBD@Z
?read@Input@osgDB@@QAE_NPBDVParameter@ArgumentParser@osg@@@Z
??1RegisterDotOsgWrapperProxy@osgDB@@QAE@XZ
osg80-osgviewer
?libraryName@CompositeViewer@osgViewer@@UBEPBDXZ
?clone@CompositeViewer@osgViewer@@UBEPAVObject@osg@@ABVCopyOp@4@@Z
?cloneType@CompositeViewer@osgViewer@@UBEPAVObject@osg@@XZ
?isSameKindAs@CompositeViewer@osgViewer@@UBE_NPBVObject@osg@@@Z
?className@CompositeViewer@osgViewer@@UBEPBDXZ
??0CompositeViewer@osgViewer@@QAE@XZ
?setUpViewInWindow@View@osgViewer@@QAEXHHHHI@Z
?setUpViewAcrossAllScreens@View@osgViewer@@QAEXXZ
?setUpViewOnSingleScreen@View@osgViewer@@QAEXI@Z
?setUpViewFor3DSphericalDisplay@View@osgViewer@@QAEXNNIPAVImage@osg@@ABVMatrixd@4@@Z
??0View@osgViewer@@QAE@XZ
?asView@View@osgViewer@@UAEPAV1osg@@XZ
?requestRedraw@View@osgViewer@@UAEXXZ
?requestContinuousUpdate@View@osgViewer@@UAEX_N@Z
?requestWarpPointer@View@osgViewer@@UAEXMM@Z
?libraryName@View@osgViewer@@UBEPBDXZ
??1View@osgViewer@@MAE@XZ
?cloneType@View@osgViewer@@UBEPAVObject@osg@@XZ
?className@View@osgViewer@@UBEPBDXZ
?isSameKindAs@View@osgViewer@@UBE_NPBVObject@osg@@@Z
??0Viewer@osgViewer@@QAE@XZ
??1Viewer@osgViewer@@UAE@XZ
?isSameKindAs@Viewer@osgViewer@@UBE_NPBVObject@osg@@@Z
?clone@Viewer@osgViewer@@UBEPAVObject@osg@@ABVCopyOp@4@@Z
?libraryName@Viewer@osgViewer@@UBEPBDXZ
?cloneType@Viewer@osgViewer@@UBEPAVObject@osg@@XZ
?className@Viewer@osgViewer@@UBEPBDXZ
??1CompositeViewer@osgViewer@@UAE@XZ
?clone@View@osgViewer@@UBEPAVObject@osg@@ABVCopyOp@4@@Z
?setUpViewForPanoramicSphericalDisplay@View@osgViewer@@QAEXNNIPAVImage@osg@@ABVMatrixd@4@@Z
msvcp90
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
msvcr90
__CxxFrameHandler3
??3@YAXPAX@Z
??2@YAPAXI@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_purecall
_invalid_parameter_noinfo
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
__RTDynamicCast
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
kernel32
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ