Direct3DCreate9
Static task
static1
Behavioral task
behavioral1
Sample
3be28eb949941718772166935d9d98bd_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3be28eb949941718772166935d9d98bd_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3be28eb949941718772166935d9d98bd_JaffaCakes118
-
Size
252KB
-
MD5
3be28eb949941718772166935d9d98bd
-
SHA1
4b37c83f3263e456e679cf0876cafdbc663ab750
-
SHA256
7211cc2832fa45eb1bb37057134ae0eda60789375c9114c1da6a9996ea5b22a0
-
SHA512
01a6bbcc59ffe99ca157c5426fb5854607f8d7d308985c4b65a7a9790353f49156f51f482ab8a5e0d3937b8bfb32ac10b43861975eb5e902774032d7195bd129
-
SSDEEP
3072:KjKTpcLlxliJRagrDRkQZfx1rMd1/n6yDB1IkFZHjZ55OPmA:K9M3DRhZfPo/6aB1Fa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3be28eb949941718772166935d9d98bd_JaffaCakes118
Files
-
3be28eb949941718772166935d9d98bd_JaffaCakes118.dll windows:5 windows x86 arch:x86
31ff7d11e46c9d6e8644b28596564172
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
d3dx9_25
D3DXCreateSprite
D3DXCreateTextureFromFileInMemoryEx
kernel32
GetLastError
FreeLibrary
GetTickCount
GetSystemDirectoryA
GetProcAddress
DisableThreadLibraryCalls
GetLocalTime
LoadLibraryA
GetModuleFileNameA
SetUnhandledExceptionFilter
FlushInstructionCache
GlobalUnlock
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
CreateFileA
HeapSize
SetFilePointer
GlobalAlloc
GlobalLock
WriteProcessMemory
VirtualProtect
GetModuleHandleA
GetSystemInfo
IsBadWritePtr
ReadProcessMemory
GetSystemTimeAsFileTime
IsBadReadPtr
GetCurrentProcess
GetProcessHeap
SetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
RtlUnwind
CloseHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
MultiByteToWideChar
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
user32
GetClientRect
GetAsyncKeyState
SetWindowPos
GetForegroundWindow
MapVirtualKeyA
SetWindowLongA
CallWindowProcA
FillRect
CloseClipboard
EmptyClipboard
OpenClipboard
SetClipboardData
gdi32
SetTextColor
DeleteDC
CreateDIBSection
CreateFontA
GetDeviceCaps
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
SetMapMode
SetTextAlign
ExtTextOutA
CreateSolidBrush
GetTextExtentPoint32A
Exports
Exports
Sections
.text Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d3d9_sh Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ