Gutim
Static task
static1
Behavioral task
behavioral1
Sample
e92d50f4349ca1a51784fa8155f699e1_JaffaCakes118.dll
Resource
win7-20240221-en
General
-
Target
e92d50f4349ca1a51784fa8155f699e1_JaffaCakes118
-
Size
856KB
-
MD5
e92d50f4349ca1a51784fa8155f699e1
-
SHA1
bd10a2a6b0c1212ff697633cef5198eccde5413a
-
SHA256
9dbffb4b069247648835fbdbc7ee71d467ee258a37b05797e83facfe53e61015
-
SHA512
1ef72f07d4175ef0fa6d1df9413869a8cdd6a68fbf9dfdf2b36fec844a4b33be0087ae75e6baeb74fbc198144aac490ffee74b213f78af4d17270d167aa45fde
-
SSDEEP
12288:AB7O8YzAyMqsaVtvdWR6ZO9ikMVESyQHMsTcuUq6NMEdk:AB7pYUy3sGvtYOEpP7q6N5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e92d50f4349ca1a51784fa8155f699e1_JaffaCakes118
Files
-
e92d50f4349ca1a51784fa8155f699e1_JaffaCakes118.dll windows:4 windows x86 arch:x86
248f2d602d490233abbb095e760215c2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetStartupInfoA
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
IsBadWritePtr
VirtualFree
HeapCreate
InterlockedExchange
HeapDestroy
HeapSize
HeapReAlloc
TerminateProcess
GetCommandLineA
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetTickCount
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetShortPathNameA
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetCurrentDirectoryA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalFlags
InterlockedDecrement
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
CloseHandle
GlobalAddAtomA
SetLastError
SizeofResource
MulDiv
FormatMessageA
lstrcpynA
LocalFree
GetCurrentThread
GetCurrentThreadId
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
lstrcmpA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FreeResource
LoadLibraryW
ExitProcess
GetCurrentProcess
LoadResource
FindResourceA
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
IsBadReadPtr
user32
GetTabbedTextExtentA
GetDCEx
LockWindowUpdate
RegisterClipboardFormatA
GetSysColorBrush
WindowFromPoint
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RedrawWindow
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
FillRect
GetDC
ReleaseDC
LoadCursorA
DestroyCursor
SetRect
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsChild
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetClientRect
GetMenu
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
PostThreadMessageA
DefWindowProcA
GetWindowPlacement
GetWindow
SetWindowContextHelpId
MapDialogRect
wsprintfA
LoadMenuA
LoadAcceleratorsA
DestroyMenu
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
SetFocus
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
CharUpperA
UpdateWindow
EnableWindow
GetParent
DrawStateA
CopyRect
InflateRect
OffsetRect
LoadBitmapA
DrawEdge
CreateMenu
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
MessageBoxA
GetLastActivePopup
ShowOwnedPopups
SetCursor
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetSubMenu
RemoveMenu
SetWindowRgn
DrawIcon
FindWindowA
PostMessageA
PostQuitMessage
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetCursorPos
GetWindowLongA
IsWindow
KillTimer
SetTimer
MessageBeep
GetNextDlgGroupItem
SetCapture
InvalidateRgn
CharNextA
AppendMenuA
GetMenuItemCount
SystemParametersInfoA
GetSysColor
CopyAcceleratorTableA
GetMenuItemInfoA
GetSystemMetrics
DestroyIcon
GetKeyNameTextA
MapVirtualKeyA
SetMenuItemInfoA
DrawFrameControl
SendMessageA
IsIconic
IsZoomed
GetWindowRect
SetWindowLongA
DrawIconEx
GetClassLongA
DrawCaption
CallWindowProcA
PtInRect
IntersectRect
ScreenToClient
GetUpdateRect
InvalidateRect
InsertMenuItemA
gdi32
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
GetTextExtentPoint32A
StretchDIBits
GetCharWidthA
SetWindowExtEx
GetTextMetricsA
SetRectRgn
GetMapMode
GetTextColor
GetRgnBox
CreateEllipticRgn
LPtoDP
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
CreateFontA
CreateFontIndirectA
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
Rectangle
DPtoLP
GetViewportOrgEx
CreatePen
SetBkColor
SetTextColor
GetClipBox
CreateDCA
GetDeviceCaps
GetBkColor
CreateSolidBrush
GetStockObject
RectInRegion
CreateRectRgnIndirect
CombineRgn
DeleteObject
GetObjectA
BitBlt
PatBlt
Ellipse
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
SetMapMode
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
CommDlgExtendedError
PrintDlgA
winspool.drv
GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegCloseKey
shell32
DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragFinish
comctl32
ImageList_GetImageCount
ImageList_AddMasked
ImageList_GetIcon
ImageList_Draw
ImageList_GetImageInfo
ImageList_SetBkColor
ord17
ImageList_Destroy
ImageList_Create
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
IsAccelerator
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
oleaut32
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
Exports
Exports
Sections
.text Size: 272KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 452KB - Virtual size: 449KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ