koqbznygu
Static task
static1
Behavioral task
behavioral1
Sample
e83672d58964200ce290f1ac16ca8f8a_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e83672d58964200ce290f1ac16ca8f8a_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e83672d58964200ce290f1ac16ca8f8a_JaffaCakes118
-
Size
50KB
-
MD5
e83672d58964200ce290f1ac16ca8f8a
-
SHA1
115d3ce310c7a58631afbeaf7223307b0039a8f7
-
SHA256
eca710078f972c8f82776fee8f6fe25a0113799733123de987a6591e28a3545a
-
SHA512
838671383ed68cd50d44b21bc1e2c0b8660d45062d7bfd13b60221f95bf0f7d5a0e74936bab3f21ea91ab16eaf0d4cf65451786f6a1bacc47a667d9b48c0ad81
-
SSDEEP
768:e3jbR7wtCSwe66BUmS2O4moQsQ34ZVGF6ZIwB0i9X5BPKsId3V9N8naHrzkx0cr0:e3HxU7lSJHnFgrB0XbD8naHs24IFCG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e83672d58964200ce290f1ac16ca8f8a_JaffaCakes118
Files
-
e83672d58964200ce290f1ac16ca8f8a_JaffaCakes118.dll windows:4 windows x86 arch:x86
056473e53490259fa3771329b8466653
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlCanonicalizeA
kernel32
Beep
SetLastError
SetInformationJobObject
lstrcmpiA
FindNextChangeNotification
QueueUserAPC
GetLargestConsoleWindowSize
lstrcpynW
FindNextVolumeA
EnumSystemLocalesA
GetFileType
FreeResource
ReadProcessMemory
GetProcessPriorityBoost
GetCurrentProcess
SetEndOfFile
CreateHardLinkA
FreeLibraryAndExitThread
BuildCommDCBAndTimeoutsW
CreateMutexA
GetDiskFreeSpaceExA
DefineDosDeviceA
GetSystemDefaultLCID
MulDiv
GetStartupInfoW
SetComputerNameW
SetLocalTime
SetConsoleCursorInfo
GetFileAttributesExW
GetFileAttributesW
FindResourceW
ExitThread
GetTimeZoneInformation
RequestWakeupLatency
GetCommConfig
FileTimeToLocalFileTime
GetLogicalDrives
GlobalAddAtomA
FindResourceExA
Sleep
GetPrivateProfileStringW
HeapAlloc
GetProcessHeap
HeapFree
ConvertDefaultLocale
InterlockedDecrement
ole32
OleRun
user32
IsClipboardFormatAvailable
DialogBoxIndirectParamW
OpenIcon
GetMenuItemRect
CallWindowProcA
InvalidateRgn
GetPropA
KillTimer
SetTimer
GetWindowThreadProcessId
CharLowerBuffA
CreateIconIndirect
UnhookWinEvent
SetCursorPos
VkKeyScanExA
GetDlgItemTextW
HideCaret
DragObject
OemToCharBuffA
ToAscii
GetCursorInfo
DlgDirSelectComboBoxExA
EmptyClipboard
GetClassInfoExW
LoadImageW
ChangeDisplaySettingsA
FindWindowA
SetCapture
GetSysColor
CountClipboardFormats
SetPropA
CheckMenuRadioItem
GetListBoxInfo
GetKeyNameTextW
SendMessageTimeoutW
BeginDeferWindowPos
ReleaseDC
advapi32
RegLoadKeyA
msvcrt
malloc
memset
free
winmm
mixerOpen
Exports
Exports
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1B
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 798B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ