antiemu2
Static task
static1
Behavioral task
behavioral1
Sample
e9e3910451a43085793c2011661b537a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9e3910451a43085793c2011661b537a_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e9e3910451a43085793c2011661b537a_JaffaCakes118
-
Size
824KB
-
MD5
e9e3910451a43085793c2011661b537a
-
SHA1
b2743154a49dd838295b6933a3af8efcde7364a6
-
SHA256
e5305e3f8ee708e73a6b985cc12d0c0416b62f73e8ad74de74b566ba4ed04056
-
SHA512
8648283f7304a2505e1d845b4bfc9b5f0cbc17de45d31727685d9acc73b7b3e888069aca196fe054a97fe53f85db6e103db1671c4a3406ea1877669cf16857fb
-
SSDEEP
12288:QN0sIGVg9J4iP6wYsrMDVz+tQ47Oj8Fa8hn+1oShtZGPS1l78S9IgwpSgsYL/9X5:QI3pPtMDVzkt01fQK1Os/ErUeBDxn6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9e3910451a43085793c2011661b537a_JaffaCakes118
Files
-
e9e3910451a43085793c2011661b537a_JaffaCakes118.dll windows:5 windows x86 arch:x86
058243742f7a402044d931ecdf138189
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FileTimeToLocalFileTime
SetEvent
GetSystemDirectoryA
GetLastError
GetCurrentProcess
LockFile
SetLastError
TerminateProcess
CreateEventA
lstrlenA
SetFilePointer
FreeLibrary
LeaveCriticalSection
HeapFree
FormatMessageA
GetVersion
CloseHandle
GlobalHandle
FileTimeToSystemTime
ExitProcess
GetStdHandle
GetOEMCP
GlobalFlags
WaitForSingleObject
CompareStringA
UnhandledExceptionFilter
lstrcpynA
HeapDestroy
HeapCreate
lstrcmpA
lstrcmpiA
FindResourceA
GlobalFree
FindClose
CreateMutexA
SetUnhandledExceptionFilter
GlobalGetAtomNameA
LocalAlloc
GlobalLock
GetProfileStringA
SetErrorMode
VirtualAlloc
GetPrivateProfileStringA
IsBadWritePtr
LoadLibraryA
GetFileTime
GetLocalTime
MultiByteToWideChar
LockResource
TlsGetValue
FindFirstFileA
WinExec
TlsSetValue
LCMapStringW
SetStdHandle
GetACP
TlsAlloc
LCMapStringA
DeleteCriticalSection
TlsFree
GetProcessHeap
VirtualProtect
GlobalUnlock
SetHandleCount
ResumeThread
CompareStringW
SizeofResource
GlobalDeleteAtom
GetFullPathNameA
GetCurrentThread
InterlockedDecrement
GetFileSize
IsBadCodePtr
GlobalFindAtomA
EnterCriticalSection
lstrcatA
GlobalAlloc
SetEndOfFile
InterlockedIncrement
InitializeCriticalSection
GetThreadLocale
FreeEnvironmentStringsA
CreateFileA
GetModuleFileNameA
HeapAlloc
GetModuleHandleA
GlobalReAlloc
HeapSize
IsDebuggerPresent
GetFileType
LoadResource
GetTickCount
LocalFree
GetProcessVersion
GetStringTypeA
GetSystemDefaultLangID
Sleep
GetEnvironmentStrings
GetTimeZoneInformation
MulDiv
GlobalAddAtomA
ExitThread
SuspendThread
ReadFile
GetFileAttributesA
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoA
lstrcpyA
UnlockFile
GetStringTypeW
GetEnvironmentStringsW
GetCurrentThreadId
RaiseException
GetCommandLineA
GetVersionExA
FlushFileBuffers
CreateThread
DuplicateHandle
RtlUnwind
LocalReAlloc
GetCPInfo
SetEnvironmentVariableA
IsBadReadPtr
WriteFile
GetProcAddress
WritePrivateProfileStringA
VirtualFree
HeapReAlloc
GetVolumeInformationA
SetThreadPriority
user32
InvalidateRect
LoadBitmapA
PostQuitMessage
EnableWindow
SetRect
GetWindow
GetWindowRect
GetDlgItem
GetWindowPlacement
SetCursor
IsIconic
GetDlgCtrlID
GrayStringA
PostMessageA
InflateRect
OffsetRect
CreateWindowExA
IntersectRect
SetForegroundWindow
GetWindowTextLengthA
PeekMessageA
GetSysColorBrush
RegisterClassA
PtInRect
TranslateMessage
IsWindow
MessageBoxA
CallWindowProcA
ModifyMenuA
GetWindowLongA
GetSysColor
GetMessagePos
SetCapture
GetPropA
GetNextDlgGroupItem
SetMenuDefaultItem
GetSystemMetrics
DefWindowProcA
GetDesktopWindow
ShowCaret
IsChild
GetMenu
LoadCursorA
GetForegroundWindow
DefDlgProcA
GetClassNameA
GetClassInfoA
MapWindowPoints
SetMenuItemBitmaps
DrawFocusRect
LoadStringA
wsprintfA
DrawTextA
GetMenuItemCount
CheckMenuItem
ValidateRect
SetActiveWindow
GetWindowDC
GetCapture
PostThreadMessageA
UpdateWindow
UnhookWindowsHookEx
SetWindowPos
ReleaseDC
EndPaint
ExcludeUpdateRgn
RegisterWindowMessageA
AdjustWindowRectEx
GetWindowTextA
GetActiveWindow
SendDlgItemMessageA
IsWindowEnabled
WinHelpA
IsWindowUnicode
TabbedTextOutA
GetKeyState
MapDialogRect
DrawIcon
SetTimer
CharUpperA
MoveWindow
SendMessageA
MessageBeep
GetParent
GetLastActivePopup
GetClientRect
EnableMenuItem
SetWindowRgn
GetNextDlgTabItem
CopyRect
DispatchMessageA
CopyAcceleratorTableA
DestroyMenu
TrackPopupMenu
GetTopWindow
IsWindowVisible
KillTimer
ScreenToClient
UnregisterClassA
GetCursorPos
HideCaret
SystemParametersInfoA
ShowWindow
GetMenuState
ReleaseCapture
SetWindowsHookExA
RemovePropA
SetFocus
GetSubMenu
BeginPaint
SetWindowTextA
DestroyWindow
GetMessageA
ClientToScreen
GetFocus
GetMessageTime
IsDialogMessageA
GetMenuCheckMarkDimensions
EndDialog
GetMenuItemID
SetPropA
LoadIconA
GetDC
CallNextHookEx
CreateDialogIndirectParamA
GetClassLongA
CharNextA
SetWindowContextHelpId
RegisterClipboardFormatA
SetWindowLongA
gdi32
PtVisible
SelectObject
SetViewportExtEx
DeleteObject
ScaleWindowExtEx
GetTextColor
DPtoLP
ExtCreateRegion
BitBlt
TextOutA
PatBlt
GetObjectA
ExtTextOutA
LPtoDP
Escape
SaveDC
RestoreDC
CreateCompatibleBitmap
CreateDIBSection
CombineRgn
SetTextColor
GetViewportExtEx
GetDeviceCaps
SetBkMode
GetTextExtentPointA
CreateSolidBrush
GetWindowExtEx
DeleteDC
CreateCompatibleDC
ScaleViewportExtEx
OffsetViewportOrgEx
GetStockObject
RectVisible
GetBkColor
SetBkColor
IntersectClipRect
CreateDIBitmap
CreateBitmap
SetWindowExtEx
GetClipBox
SetViewportOrgEx
SetMapMode
GetMapMode
comdlg32
GetFileTitleA
advapi32
RegCloseKey
RegDeleteValueA
CopySid
RegOpenKeyExA
RegQueryValueExA
CloseServiceHandle
OpenServiceA
QueryServiceStatus
ControlService
RegSetValueExA
OpenSCManagerA
StartServiceA
RegCreateKeyExA
shell32
Shell_NotifyIconA
ShellExecuteA
ole32
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
OleUninitialize
CoTaskMemAlloc
OleIsCurrentClipboard
CLSIDFromProgID
OleInitialize
StgOpenStorageOnILockBytes
CoRevokeClassObject
CLSIDFromString
CoTaskMemFree
CoRegisterMessageFilter
OleFlushClipboard
CoFreeUnusedLibraries
oleaut32
SysStringLen
SysAllocStringLen
SysAllocStringByteLen
VariantChangeType
VariantCopy
SysFreeString
VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocString
VariantClear
comctl32
ord17
winmm
sndPlaySoundA
midiInClose
rpcrt4
UuidCreate
netapi32
NetApiBufferSize
oledlg
ord8
powrprof
GetPwrCapabilities
msvcrt
strtok
Exports
Exports
Sections
.text Size: 803KB - Virtual size: 802KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.conb Size: 512B - Virtual size: 18B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cona Size: 512B - Virtual size: 105B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ