gigi
Static task
static1
Behavioral task
behavioral1
Sample
cbf9d8f27702f1845413a9be784cd616_JaffaCakes118.dll
Resource
win7-20240221-en
General
-
Target
cbf9d8f27702f1845413a9be784cd616_JaffaCakes118
-
Size
688KB
-
MD5
cbf9d8f27702f1845413a9be784cd616
-
SHA1
cca1d33437022eae2c55f01774372b805043130b
-
SHA256
14da4c490e00343fde9db5a283c5b2f36d9699e5b5ef6df7f40ff51f97cbe8fe
-
SHA512
16511ed8698d62914189b5315145f1b1903b242336090d4673bf206b08733e544909bb4597a7406b1f77349aab27a62690638131ea7a1df2d735f028d1f8d7c3
-
SSDEEP
12288:mUOGe6UVreQJtjqiI1DxynlwwxqXIwW2FUwoOvWmM/:i6UVr9oiuxqlwwhT2TbW3/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource cbf9d8f27702f1845413a9be784cd616_JaffaCakes118
Files
-
cbf9d8f27702f1845413a9be784cd616_JaffaCakes118.dll windows:4 windows x86 arch:x86
c3999372aa5e8132ef67e26a98a6ced3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStdHandle
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
SetHandleCount
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
HeapSize
HeapReAlloc
TerminateProcess
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
RtlUnwind
HeapFree
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetShortPathNameA
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetCurrentDirectoryA
GlobalFlags
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetProfileIntA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
InterlockedDecrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
GetTickCount
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
InterlockedIncrement
CloseHandle
GlobalAddAtomA
SetLastError
CopyFileA
SizeofResource
MulDiv
GlobalSize
FormatMessageA
lstrcpynA
LocalFree
GetCurrentThread
GetCurrentThreadId
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
lstrcmpA
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
LockResource
FreeResource
LoadLibraryW
ExitProcess
GetLastError
lstrlenA
lstrcmpiA
GetStringTypeExA
lstrlenW
WideCharToMultiByte
CompareStringA
CompareStringW
MultiByteToWideChar
GetVersion
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
GetStringTypeW
InterlockedExchange
user32
SetRect
IsRectEmpty
SetParent
GetDC
WindowFromDC
ReleaseDC
InSendMessage
ShowWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
DrawIcon
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
InvalidateRect
GetWindowRect
CopyRect
PtInRect
GetWindow
RegisterClipboardFormatA
wsprintfA
LoadMenuA
LoadAcceleratorsA
DestroyMenu
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetLastActivePopup
ShowOwnedPopups
SetCursor
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
FindWindowA
DrawTextA
SetCapture
GetMenuItemInfoA
DestroyIcon
GetSysColorBrush
IsZoomed
WindowFromPoint
KillTimer
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
PostMessageA
PostQuitMessage
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
DestroyCursor
LockWindowUpdate
GetDCEx
IsWindowEnabled
GetParent
GetNextDlgTabItem
SendMessageA
EndDialog
GetClientRect
MessageBoxA
EnableWindow
CharUpperA
GetTabbedTextExtentA
GetWindowPlacement
SetWindowRgn
SetTimer
GetSystemMenu
DeleteMenu
ClipCursor
PostThreadMessageA
CreateMenu
CopyAcceleratorTableA
InflateRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
LoadCursorA
TabbedTextOutA
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
CallWindowProcA
FillRect
gdi32
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
DeleteObject
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
RestoreDC
CreatePatternBrush
CreateSolidBrush
CreateFontIndirectA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
StretchDIBits
GetCharWidthA
SetBrushOrgEx
GetBkColor
GetTextMetricsA
GetTextExtentPoint32A
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
GetWindowOrgEx
CreateEllipticRgn
LPtoDP
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetTextAlign
GetTextFaceA
UnrealizeObject
SaveDC
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
GetStockObject
PatBlt
Rectangle
DPtoLP
GetViewportOrgEx
CreatePen
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateDCA
CopyMetaFileA
GetDeviceCaps
Ellipse
CreateFontA
comdlg32
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA
CommDlgExtendedError
PrintDlgA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetJobA
advapi32
GetFileSecurityA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegCloseKey
SetFileSecurityA
shell32
DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragFinish
comctl32
ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
CreateILockBytesOnHGlobal
WriteClassStm
OleSaveToStream
CreateStreamOnHGlobal
CreateGenericComposite
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleLockRunning
StgCreateDocfileOnILockBytes
GetRunningObjectTable
CreateFileMoniker
CreateItemMoniker
OleIsRunning
CoDisconnectObject
OleRegGetMiscStatus
OleRegEnumVerbs
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoRevokeClassObject
CoRegisterClassObject
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CreateBindCtx
StringFromCLSID
OleRegGetUserType
WriteClassStg
CoTaskMemFree
CreateDataAdviseHolder
CreateOleAdviseHolder
RevokeDragDrop
RegisterDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
OleRun
CoLockObjectExternal
oleaut32
SysFreeString
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringByteLen
Exports
Exports
Sections
.text Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 260KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ