DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e00231bd4d68fc72b496a9fbf9f42ac6_JaffaCakes118.dll
Resource
win7-20240221-en
General
-
Target
e00231bd4d68fc72b496a9fbf9f42ac6_JaffaCakes118
-
Size
419KB
-
MD5
e00231bd4d68fc72b496a9fbf9f42ac6
-
SHA1
365abe99ea717f529330ed9c60c72bc9b9eb66ef
-
SHA256
1e24fd0e2d521e98cb0a68d0bdb434e45d02a0f636ac3ce9ad99c061a17e23b3
-
SHA512
6f5503ccb6842278fc5d97e86fd95b0bba1d5788f275d780d0bedc9fd78250b8f93cf1b1697cf420c24c6cee7ec32b4a1c676663659d4c75249d617203440c38
-
SSDEEP
12288:YQNr8R0/3yMMUeT5LYvIof0KEBcTLdJqjsIiq:U0/3yMMZhYvIo3YiLlIF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e00231bd4d68fc72b496a9fbf9f42ac6_JaffaCakes118
Files
-
e00231bd4d68fc72b496a9fbf9f42ac6_JaffaCakes118.dll regsvr32 windows:5 windows x86 arch:x86
dc56e072f32d1e6dbbad8cbe6ec04fdb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
RtlUnwind
HeapAlloc
GetCommandLineA
HeapFree
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
Sleep
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
GetOEMCP
GetCPInfo
GetLocaleInfoA
InterlockedExchange
CloseHandle
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetModuleHandleW
GetCurrentProcessId
GetModuleFileNameA
InterlockedDecrement
lstrcmpA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
lstrcmpW
GetVersionExA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
lstrlenA
LoadLibraryW
ExitProcess
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
SetLastError
GetProcAddress
GetModuleHandleA
GetFileType
LoadLibraryA
user32
PostQuitMessage
ValidateRect
DestroyMenu
LoadCursorA
GetSysColorBrush
GetWindowThreadProcessId
IsWindowEnabled
SetWindowTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
WinHelpA
GetCapture
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
PtInRect
CopyRect
DrawTextA
EnableWindow
GetDlgCtrlID
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowsHookExA
SendMessageA
GetWindowRect
GetClientRect
GetParent
GetSystemMetrics
GetSysColor
GetDC
DefWindowProcA
RegisterClassA
IsIconic
LoadIconA
ReleaseDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetClassNameA
gdi32
DeleteDC
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
GetStockObject
PtVisible
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
oleaut32
VariantClear
VariantChangeType
VariantInit
Exports
Exports
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ