hbhlwm
Static task
static1
Behavioral task
behavioral1
Sample
c5f025efad0cea2b4ee458e341e8159d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5f025efad0cea2b4ee458e341e8159d_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
c5f025efad0cea2b4ee458e341e8159d_JaffaCakes118
-
Size
26KB
-
MD5
c5f025efad0cea2b4ee458e341e8159d
-
SHA1
da48c3fed681bb5177e6b907f4e209649c67ac8c
-
SHA256
ccba777a1cc2820a6716099ba0979c7675c5ccf4232c4b94a2e89defc886f4d6
-
SHA512
3da2fa68e873bfd14be752edafc1d49d6b28da76b497ced8698c83bbb5ac575fc789f0995127555fa0d79b24d18d6958a11bd2fc10d230563493fc685028dc88
-
SSDEEP
384:TV5VEk80Vss21r4gnZ55okC81X5h4r2skoAOdkmwX:TVvS0LUsqz1h4ooA+kP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5f025efad0cea2b4ee458e341e8159d_JaffaCakes118
Files
-
c5f025efad0cea2b4ee458e341e8159d_JaffaCakes118.dll windows:6 windows x86 arch:x86
abe25718e15e43596e4a8a80ec906f0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
HeapReAlloc
HeapAlloc
GetLastError
CreateThread
LeaveCriticalSection
lstrlenW
lstrcatW
lstrcmpW
HeapFree
VirtualProtect
winspool.drv
DeletePrinterDriverExW
ord202
GetPrinterDataA
PlayGdiScriptOnPrinterIC
mapi32
ord193
ord73
ord192
ord194
ord171
comdlg32
GetSaveFileNameW
FindTextW
PageSetupDlgA
ChooseFontA
GetFileTitleW
wsock32
ord1115
WSACancelBlockingCall
WSASetLastError
WSAAsyncGetServByPort
ord1111
WSAIsBlocking
pdh
PdhFormatFromRawValue
PdhSelectDataSourceA
PdhMakeCounterPathA
setupapi
SetupDiDeleteDeviceInterfaceData
SetupRenameErrorW
SetupGetMultiSzFieldA
SetupDiAskForOEMDisk
SetupQuerySpaceRequiredOnDriveW
SetupDiGetDeviceRegistryPropertyW
user32
wsprintfW
advapi32
RegCloseKey
RegGetValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
RegNotifyChangeKeyValue
RegEnumValueW
RegEnumKeyExW
RegCreateKeyExW
ole32
PropVariantClear
StringFromGUID2
CLSIDFromString
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
msvcrt
malloc
wcstol
free
_initterm
_adjust_fdiv
memcmp
memset
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ