Static task
static1
Behavioral task
behavioral1
Sample
e8f9ea3c3c7f67f413cb0699a71423aa_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8f9ea3c3c7f67f413cb0699a71423aa_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e8f9ea3c3c7f67f413cb0699a71423aa_JaffaCakes118
-
Size
241KB
-
MD5
e8f9ea3c3c7f67f413cb0699a71423aa
-
SHA1
c3274889e6a6869c47d78c00278a76e90ac68aaf
-
SHA256
52d38d674d36b751cce9a0f3df2a585d307c67b42a54a3e79a6d53070fdc5251
-
SHA512
b75c62db9fc0b316d6a63d4d4162aa92f3aa0c929363af1cbf6afeac6f3ee54370a2a1f2aac8729ca766308260d4668013db9118b7e88deafa7b550e60e63b28
-
SSDEEP
6144:xjUYdAqC7U/GmS/uKjQeeaQeeyhQeesQeeMwQeehQeeSFtiV14cQdMUs:xjUYdEaGy+tlcQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8f9ea3c3c7f67f413cb0699a71423aa_JaffaCakes118
Files
-
e8f9ea3c3c7f67f413cb0699a71423aa_JaffaCakes118.dll windows:5 windows x86 arch:x86
a066580b39b0d028bfa5de5c12b5e786
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateThread
ExitProcess
Sleep
VirtualAlloc
GetModuleHandleA
VirtualProtect
EncodePointer
DecodePointer
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
GetProcAddress
OutputDebugStringA
GetSystemInfo
user32
mouse_event
SetCursorPos
keybd_event
DestroyWindow
ShowWindow
CreateWindowExA
SetRect
GetAsyncKeyState
msvcr100
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
sprintf
??2@YAPAXI@Z
memcpy
memset
malloc
??3@YAXPAX@Z
_ftol
strncpy
iswpunct
iswdigit
iswalpha
iswspace
_CIacos
_finite
__CxxFrameHandler
d3d9
Direct3DCreate9
gdi32
GetGlyphOutlineA
DeleteObject
GetTextMetricsA
GetObjectW
DeleteDC
CreateDIBSection
SetTextAlign
ExtTextOutW
MoveToEx
ExtTextOutA
CreateCompatibleDC
SetMapMode
GetObjectA
CreateFontIndirectW
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
SetBkMode
SetBkColor
SetTextColor
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT Size: 512B - Virtual size: 431B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ