Static task
static1
Behavioral task
behavioral1
Sample
fcdcc96c580ba1da129121ee0bc6b75c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcdcc96c580ba1da129121ee0bc6b75c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fcdcc96c580ba1da129121ee0bc6b75c_JaffaCakes118
-
Size
131KB
-
MD5
fcdcc96c580ba1da129121ee0bc6b75c
-
SHA1
e7af877cca9dcbd38361cf9c46f967d3cd94e7b5
-
SHA256
cd168273e3961707bb587d9ff76c61c15d38d66dba28a2b4779ad56a2bc923af
-
SHA512
faff1a357f582d3215b30053fd2971a0e76b3206fda351af5c8a8a70487ece11df281945d19784c1fdc6a9f9b2c2d16ab900a88cc3493bc15f64181138927bc0
-
SSDEEP
3072:UPWykpnHpeOgVwcmV7b6Ff4gMvvgbZQJRC957b4:PJeOgV+JhjXgbcRC91b4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcdcc96c580ba1da129121ee0bc6b75c_JaffaCakes118
Files
-
fcdcc96c580ba1da129121ee0bc6b75c_JaffaCakes118.dll windows:4 windows x86 arch:x86
8f3e3f43ea1ca1734756c1b5385a839d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ddimage
??1Iop@Image@DD@@UAE@XZ
?error@Op@Image@DD@@QAAXPBDZZ
?field@Op@Image@DD@@QAEPAXPBD@Z
?create@Op@Image@DD@@IAEPAV123@PAVNode@@PBD@Z
??0Iop@Image@DD@@IAE@PAVNode@@@Z
?Tooltip@Image@DD@@YAXAAVKnob_Closure@12@PBD@Z
?SetRange@Image@DD@@YAXAAVKnob_Closure@12@NN@Z
?validate@Op@Image@DD@@QAEX_N@Z
??4ChannelSet@Image@DD@@QAEABV012@W4Channel@12@@Z
?input@Op@Image@DD@@QBEPAV123@H@Z
??4ChannelSet@Image@DD@@QAEABV012@ABV012@@Z
??IChannelSet@Image@DD@@QBE_NW4Channel@12@@Z
?request@Iop@Image@DD@@QAEXHHHHABVChannelSet@23@H@Z
??ZChannelSet@Image@DD@@QAEXW4Channel@12@@Z
??0ChannelSet@Image@DD@@QAE@ABV012@@Z
?copy@Row@Image@DD@@QAEXW4Channel@23@ABV123@0HH@Z
?pre_copy@Row@Image@DD@@QBEXW4Channel@23@AAV123@0@Z
??1Row@Image@DD@@QAE@XZ
??0Row@Image@DD@@QAE@HH@Z
?get@Iop@Image@DD@@QAEXHHHABVChannelSet@23@AAVRow@23@@Z
?ctor2@Description@Image@DD@@AAEXP6AXPAV123@@Z@Z
?add@Description@Op@Image@DD@@KAXPAV134@@Z
?invalidate@Op@Image@DD@@QAE_NXZ
?abi6_2_1@Op@Image@DD@@EAEHXZ
?_open@Iop@Image@DD@@MAEXXZ
?_close@Iop@Image@DD@@MAEXXZ
?doAnyHandles@Op@Image@DD@@MAE_NPAVViewerContext@23@@Z
?_fetchMetaData@Op@Image@DD@@UAEABVBundle@MetaData@@PBD@Z
?knob_changed@Op@Image@DD@@UAEHPAVKnob@23@@Z
?memUsage@Iop@Image@DD@@UBEIXZ
?build_handles@Iop@Image@DD@@UAEXPAVViewerContext@23@@Z
?draw_handle@Op@Image@DD@@UAEXPAVViewerContext@23@@Z
?optional_input@Op@Image@DD@@UBEHXZ
?minimum_inputs@Op@Image@DD@@UBEHXZ
?maximum_inputs@Op@Image@DD@@UBEHXZ
?test_input@Iop@Image@DD@@UBE_NHPAVOp@23@@Z
?inputs@Op@Image@DD@@UAEXH@Z
?set_input@Op@Image@DD@@UAEXHPAV123@HH@Z
?setOutputContext@Op@Image@DD@@UAEXABVOutputContext@23@@Z
?append@Op@Image@DD@@UAEXAAVHash@23@@Z
?uses_input@Op@Image@DD@@UBEMH@Z
?build_splits@Op@Image@DD@@UAEXXZ
?split_input@Op@Image@DD@@UBEHH@Z
?inputContext@Op@Image@DD@@UBEABVOutputContext@23@HHAAV423@@Z
?inputUIContext@Op@Image@DD@@UBEPBVOutputContext@23@HAAV423@@Z
?default_input@Iop@Image@DD@@UBEPAVOp@23@H@Z
?node_shape@Op@Image@DD@@UBEPBDXZ
?node_color@Op@Image@DD@@UBEIXZ
?input_label@Op@Image@DD@@UBEPBDHPAD@Z
?input_longlabel@Op@Image@DD@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?inUse@Iop@Image@DD@@MBE_NXZ
?firstEngineRendersWholeRequest@Op@Image@DD@@UBE_NXZ
?displayName@Op@Image@DD@@UBEPBDXZ
?doFetchPlane@Iop@Image@DD@@MAEXAAVImagePlane@23@@Z
?in_channels@Iop@Image@DD@@UBEXHAAVChannelSet@23@@Z
?set_texturemap@Iop@Image@DD@@UAE_NPAVViewerContext@23@_N@Z
?unset_texturemap@Iop@Image@DD@@UAEXPAVViewerContext@23@@Z
?shade_GL@Iop@Image@DD@@UAE_NPAVViewerContext@23@AAVGeoInfo@23@@Z
?vertex_shader@Iop@Image@DD@@UAEXAAVVertexContext@23@@Z
?fragment_shader@Iop@Image@DD@@UAEXABVVertexContext@23@AAVPixel@23@@Z
?sample@Iop@Image@DD@@UAEXABVVector2@23@00PAVFilter@23@AAVPixel@23@@Z
?sample@Iop@Image@DD@@UAEXMMMMPAVFilter@23@AAVPixel@23@@Z
?sample_shadowmap@Iop@Image@DD@@UAEMPAV123@_NMMMMPAVFilter@23@M@Z
?gpuEngine_decl@Iop@Image@DD@@UBEPBDXZ
?gpuEngine_body@Iop@Image@DD@@UBEPBDXZ
?gpuEngine_getNumRequiredTexUnits@Iop@Image@DD@@UBEHXZ
?gpuEngine_GL_begin@Iop@Image@DD@@UAEXPAVGPUContext@23@@Z
?gpuEngine_GL_end@Iop@Image@DD@@UAEXPAVGPUContext@23@@Z
msvcp80
?_Xran@_String_base@std@@SAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@_String_base@std@@SAXXZ
msvcr80
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
?what@exception@std@@UBEPBDXZ
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
??_V@YAXPAX@Z
__iob_func
fprintf
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??2@YAPAXI@Z
??3@YAXPAX@Z
_CxxThrowException
??0exception@std@@QAE@ABQBD@Z
memcpy_s
memmove_s
__CxxFrameHandler
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
_adjust_fdiv
kernel32
Sleep
LoadLibraryA
GetProcAddress
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedExchange
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 596B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ