Static task
static1
Behavioral task
behavioral1
Sample
de34f9556f93252c8e1ac21fd9f2ded4_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
de34f9556f93252c8e1ac21fd9f2ded4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
de34f9556f93252c8e1ac21fd9f2ded4_JaffaCakes118
-
Size
160KB
-
MD5
de34f9556f93252c8e1ac21fd9f2ded4
-
SHA1
229c069d42dd97cd0bee87017b96cb79b58f5ccf
-
SHA256
b3ad12dbb87a83575dc59bf6bf8ab15d7898a5bfd5ff17187017294d359c6303
-
SHA512
5716fa4b5e836fa29dc5c244d1f3a0eed03a6a404520c57355a2d85f5346a8644228cdca724949ffe1e7183f8ebc7d4aea5b98d650d1c685a37b0eb1dfd9f19e
-
SSDEEP
3072:FmxkOos7+Rei5iOg6vPRzYZwjGSBv68Hj2g9PQZC42xXvY+mTL:Vs7OD5iOg6XRzYZ6GaCshyZC4l+mT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de34f9556f93252c8e1ac21fd9f2ded4_JaffaCakes118
Files
-
de34f9556f93252c8e1ac21fd9f2ded4_JaffaCakes118.dll windows:4 windows x86 arch:x86
4a5246e49aab2b05a4aa0bef75eb0ad3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ddimage
??_7Lock@@6B@
??1Iop@Image@DD@@UAE@XZ
??1NukeWrapper@Image@DD@@UAE@XZ
??0NukeWrapper@Image@DD@@QAE@PAVIop@12@@Z
?inputs@Op@Image@DD@@UAEXH@Z
??0Iop@Image@DD@@IAE@PAVNode@@@Z
?Tooltip@Image@DD@@YAXAAVKnob_Closure@12@PBD@Z
?clipmove@Info@Iop@Image@DD@@QAEXHHHH@Z
?validate@Op@Image@DD@@QAEX_N@Z
?input@Op@Image@DD@@QBEPAV123@H@Z
??4ChannelSet@Image@DD@@QAEABV012@ABV012@@Z
?request@Iop@Image@DD@@QAEXHHHHABVChannelSet@23@H@Z
??4ChannelSet@Image@DD@@QAEABV012@W4Channel@12@@Z
?is_zero@Row@Image@DD@@QBE_NW4Channel@23@@Z
?erase@Row@Image@DD@@QAEXW4Channel@23@@Z
??IChannelSet@Image@DD@@QBE_NW4Channel@12@@Z
?get@Iop@Image@DD@@QAEXHHHABVChannelSet@23@AAVRow@23@@Z
?_next@ChannelSet@Image@DD@@ABE?AW4Channel@23@W4423@@Z
?writable@Row@Image@DD@@QAEPAMW4Channel@23@@Z
?_first@ChannelSet@Image@DD@@ABE?AW4Channel@23@XZ
??1Row@Image@DD@@QAE@XZ
??0Row@Image@DD@@QAE@HH@Z
?aborted@Op@Image@DD@@QBE_NXZ
?load_range@Interest@Image@DD@@QAEXHH@Z
??1Interest@Image@DD@@QAE@XZ
??0Interest@Image@DD@@QAE@AAVIop@12@ABVChannelSet@12@_NPAVInterestRatchet@12@@Z
??ZChannelSet@Image@DD@@QAEXABV012@@Z
??0ChannelSet@Image@DD@@QAE@ABV012@@Z
?ctor2@Description@Image@DD@@AAEXP6AXPAV123@@Z@Z
?add@Description@Op@Image@DD@@KAXPAV134@@Z
?abi6_2_1@Op@Image@DD@@EAEHXZ
?_invalidate@Iop@Image@DD@@MAEXXZ
?_open@Iop@Image@DD@@MAEXXZ
?_close@Iop@Image@DD@@MAEXXZ
?doAnyHandles@Op@Image@DD@@MAE_NPAVViewerContext@23@@Z
?_fetchMetaData@Op@Image@DD@@UAEABVBundle@MetaData@@PBD@Z
?knob_changed@Op@Image@DD@@UAEHPAVKnob@23@@Z
?memUsage@Iop@Image@DD@@UBEIXZ
?build_handles@Iop@Image@DD@@UAEXPAVViewerContext@23@@Z
?draw_handle@Op@Image@DD@@UAEXPAVViewerContext@23@@Z
?optional_input@Op@Image@DD@@UBEHXZ
?minimum_inputs@Op@Image@DD@@UBEHXZ
?maximum_inputs@Op@Image@DD@@UBEHXZ
?test_input@Iop@Image@DD@@UBE_NHPAVOp@23@@Z
?set_input@Op@Image@DD@@UAEXHPAV123@HH@Z
?setOutputContext@Op@Image@DD@@UAEXABVOutputContext@23@@Z
?append@Op@Image@DD@@UAEXAAVHash@23@@Z
?uses_input@Op@Image@DD@@UBEMH@Z
?build_splits@Op@Image@DD@@UAEXXZ
?split_input@Op@Image@DD@@UBEHH@Z
?inputContext@Op@Image@DD@@UBEABVOutputContext@23@HHAAV423@@Z
?inputUIContext@Op@Image@DD@@UBEPBVOutputContext@23@HAAV423@@Z
?default_input@Iop@Image@DD@@UBEPAVOp@23@H@Z
?node_shape@Op@Image@DD@@UBEPBDXZ
?node_color@Op@Image@DD@@UBEIXZ
?input_label@Op@Image@DD@@UBEPBDHPAD@Z
?input_longlabel@Op@Image@DD@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?inUse@Iop@Image@DD@@MBE_NXZ
?firstEngineRendersWholeRequest@Op@Image@DD@@UBE_NXZ
?displayName@Op@Image@DD@@UBEPBDXZ
?doFetchPlane@Iop@Image@DD@@MAEXAAVImagePlane@23@@Z
?in_channels@Iop@Image@DD@@UBEXHAAVChannelSet@23@@Z
?set_texturemap@Iop@Image@DD@@UAE_NPAVViewerContext@23@_N@Z
?unset_texturemap@Iop@Image@DD@@UAEXPAVViewerContext@23@@Z
?shade_GL@Iop@Image@DD@@UAE_NPAVViewerContext@23@AAVGeoInfo@23@@Z
?vertex_shader@Iop@Image@DD@@UAEXAAVVertexContext@23@@Z
?fragment_shader@Iop@Image@DD@@UAEXABVVertexContext@23@AAVPixel@23@@Z
?sample@Iop@Image@DD@@UAEXABVVector2@23@00PAVFilter@23@AAVPixel@23@@Z
?sample@Iop@Image@DD@@UAEXMMMMPAVFilter@23@AAVPixel@23@@Z
?sample_shadowmap@Iop@Image@DD@@UAEMPAV123@_NMMMMPAVFilter@23@M@Z
?gpuEngine_decl@Iop@Image@DD@@UBEPBDXZ
?gpuEngine_body@Iop@Image@DD@@UBEPBDXZ
?gpuEngine_getNumRequiredTexUnits@Iop@Image@DD@@UBEHXZ
?gpuEngine_GL_begin@Iop@Image@DD@@UAEXPAVGPUContext@23@@Z
?gpuEngine_GL_end@Iop@Image@DD@@UAEXPAVGPUContext@23@@Z
?_invalidate@NukeWrapper@Image@DD@@UAEXXZ
?_validate@NukeWrapper@Image@DD@@UAEX_N@Z
?_open@NukeWrapper@Image@DD@@UAEXXZ
?_close@NukeWrapper@Image@DD@@UAEXXZ
?doAnyHandles@NukeWrapper@Image@DD@@UAE_NPAVViewerContext@23@@Z
?getPrevVersionsWanted@NukeWrapper@Image@DD@@UBE?AV?$vector@VOutputContext@Image@DD@@V?$allocator@VOutputContext@Image@DD@@@std@@@std@@XZ
?_fetchMetaData@NukeWrapper@Image@DD@@UAEABVBundle@MetaData@@PBD@Z
?knobs@NukeWrapper@Image@DD@@UAEXAAVKnob_Closure@23@@Z
?knob_changed@NukeWrapper@Image@DD@@UAEHPAVKnob@23@@Z
?build_handles@NukeWrapper@Image@DD@@UAEXPAVViewerContext@23@@Z
?draw_handle@NukeWrapper@Image@DD@@UAEXPAVViewerContext@23@@Z
?optional_input@NukeWrapper@Image@DD@@UBEHXZ
?minimum_inputs@NukeWrapper@Image@DD@@UBEHXZ
?maximum_inputs@NukeWrapper@Image@DD@@UBEHXZ
?test_input@NukeWrapper@Image@DD@@UBE_NHPAVOp@23@@Z
?inputs@NukeWrapper@Image@DD@@UAEXH@Z
?set_input@NukeWrapper@Image@DD@@UAEXHPAVOp@23@HH@Z
?setOutputContext@NukeWrapper@Image@DD@@UAEXABVOutputContext@23@@Z
?append@NukeWrapper@Image@DD@@UAEXAAVHash@23@@Z
?uses_input@NukeWrapper@Image@DD@@UBEMH@Z
?build_splits@NukeWrapper@Image@DD@@UAEXXZ
?split_input@NukeWrapper@Image@DD@@UBEHH@Z
?inputContext@NukeWrapper@Image@DD@@UBEABVOutputContext@23@HHAAV423@@Z
?default_input@NukeWrapper@Image@DD@@UBEPAVOp@23@H@Z
?node_shape@NukeWrapper@Image@DD@@UBEPBDXZ
?node_color@NukeWrapper@Image@DD@@UBEIXZ
?node_help@NukeWrapper@Image@DD@@UBEPBDXZ
?input_label@NukeWrapper@Image@DD@@UBEPBDHPAD@Z
?firstEngineRendersWholeRequest@NukeWrapper@Image@DD@@UBE_NXZ
?Class@NukeWrapper@Image@DD@@UBEPBDXZ
?displayName@NukeWrapper@Image@DD@@UBEPBDXZ
?_request@NukeWrapper@Image@DD@@UAEXHHHHABVChannelSet@23@H@Z
?engine@NukeWrapper@Image@DD@@UAEXHHHABVChannelSet@23@AAVRow@23@@Z
?in_channels@NukeWrapper@Image@DD@@UBEXHAAVChannelSet@23@@Z
?gpuEngine_decl@NukeWrapper@Image@DD@@UBEPBDXZ
?gpuEngine_body@NukeWrapper@Image@DD@@UBEPBDXZ
?gpuEngine_GL_begin@NukeWrapper@Image@DD@@UAEXPAVGPUContext@23@@Z
?gpuEngine_GL_end@NukeWrapper@Image@DD@@UAEXPAVGPUContext@23@@Z
msvcp80
?_Xran@_String_base@std@@SAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@_String_base@std@@SAXXZ
msvcr80
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_initterm
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
?what@exception@std@@UBEPBDXZ
??_V@YAXPAX@Z
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??2@YAPAXI@Z
??3@YAXPAX@Z
_CxxThrowException
??0exception@std@@QAE@ABQBD@Z
memcpy_s
memmove_s
__CxxFrameHandler
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
?terminate@@YAXXZ
memset
kernel32
LoadLibraryA
GetProcAddress
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
DeleteCriticalSection
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 4KB - Virtual size: 996B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ