GetPlugin
Static task
static1
Behavioral task
behavioral1
Sample
3f1232eaf45f14aaf6881bb03de86db5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f1232eaf45f14aaf6881bb03de86db5_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3f1232eaf45f14aaf6881bb03de86db5_JaffaCakes118
-
Size
2.4MB
-
MD5
3f1232eaf45f14aaf6881bb03de86db5
-
SHA1
00c7fc3aab1619d480983c82da7e213576f49187
-
SHA256
b60b848c87c6923e621806783eafcbed55fa1aac4c953062cc3531864a68c0ce
-
SHA512
f1916e076b9d4e38941c5460ef5904b33e03f904f43f05972fbd292804f849183087fdc549637eb3c447c10fa8f8546d3f8f0899bb485068c1874a5a28614384
-
SSDEEP
49152:9rfLuG+QkWe2kk19PeL1dEzgjr/ifDs2Yo9BIJWO5di2e:1qG+p2kG9PAEzgjj0DsqoJN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f1232eaf45f14aaf6881bb03de86db5_JaffaCakes118
Files
-
3f1232eaf45f14aaf6881bb03de86db5_JaffaCakes118.dll windows:4 windows x86 arch:x86
268b587d81993d5b656645168ef3aa36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
d3d8
Direct3DCreate8
winmm
PlaySoundA
imagehlp
CheckSumMappedFile
kernel32
FindFirstFileW
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
UnregisterClassW
MessageBoxA
gdi32
SetViewportOrgEx
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegSetValueExW
shell32
SHFileOperationA
shlwapi
PathFindFileNameW
oledlg
OleUIBusyW
ole32
OleUninitialize
oleaut32
SysFreeString
ws2_32
WSAStartup
gdiplus
GdipDrawImageRectI
Exports
Exports
Sections
.text Size: - Virtual size: 879KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ