Static task
static1
Behavioral task
behavioral1
Sample
f32bcf68c7ef9b53f17de0ca8392fade_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f32bcf68c7ef9b53f17de0ca8392fade_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f32bcf68c7ef9b53f17de0ca8392fade_JaffaCakes118
-
Size
320KB
-
MD5
f32bcf68c7ef9b53f17de0ca8392fade
-
SHA1
c33f6e626b72ec96f5d5f6ab41c1b554373e382a
-
SHA256
7deaf0ee4ef44cf97f40d216c021152dbdd81d6bd31b70520df8a2d5a93dbccf
-
SHA512
c626c46897579c759a3b2c4dba1c5c0a9095d97ec0f36366cce274de7bae2fe79e5d9b45fb68646b7fb3b83b818ff9ddc3e4053a21eb08c8026dc438b75e1646
-
SSDEEP
6144:v7WgZLtXZC5yyBkySsnGpgsvkfEYUh+16Ui76FHbIuN1WoIR32JV:v7WgZLts5yCbSsnGpga1+EUiOpuLN2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f32bcf68c7ef9b53f17de0ca8392fade_JaffaCakes118
Files
-
f32bcf68c7ef9b53f17de0ca8392fade_JaffaCakes118.dll windows:4 windows x86 arch:x86
2b821d05e5dc8bd895f7760bc31ead28
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetACP
VirtualAllocEx
ExitProcess
lstrlenA
GetCommandLineW
GetOEMCP
GetProcAddress
GetModuleHandleW
LoadLibraryA
GetModuleHandleA
ExitThread
VirtualAlloc
IsBadReadPtr
LocalAlloc
shell32
SHGetDesktopFolder
Shell_NotifyIconA
SHFileOperationA
SHGetFolderPathA
DragQueryFileA
msvcrt
time
cos
pow
strlen
exit
memset
sprintf
sin
exp
gdi32
GetDIBColorTable
GetRgnBox
GetObjectA
GetDIBits
SetBkMode
ole32
MkParseDisplayName
StgCreateDocfileOnILockBytes
advapi32
RegDeleteKeyA
GetLengthSid
oleaut32
SysStringLen
SafeArrayUnaccessData
SafeArrayCreate
VariantChangeType
SysFreeString
SafeArrayGetUBound
GetErrorInfo
VariantCopyInd
user32
DrawEdge
EnableMenuItem
IsWindowEnabled
MsgWaitForMultipleObjects
MapWindowPoints
OpenClipboard
DestroyWindow
GetMenuStringA
GetSystemMenu
DefFrameProcA
GetWindowTextA
SetMenu
MapVirtualKeyA
GetKeyboardLayoutList
IsChild
DrawFrameControl
BeginPaint
SetMenuItemInfoA
DrawIconEx
GetSysColorBrush
SystemParametersInfoA
GetWindow
PtInRect
SetWindowLongW
GetSubMenu
LoadKeyboardLayoutA
FillRect
SetRect
AdjustWindowRectEx
CreateMenu
RedrawWindow
MoveWindow
GetWindowLongA
OffsetRect
SetScrollInfo
SetClipboardData
DestroyMenu
DestroyIcon
DrawAnimatedRects
SendMessageA
CallWindowProcA
GetMenuState
DrawIcon
GetMessagePos
GetDC
ShowScrollBar
DispatchMessageW
CharToOemA
GetWindowRect
GetWindowThreadProcessId
SetWindowsHookExA
IsWindow
UnregisterClassA
GetTopWindow
GetKeyboardType
RemovePropA
ReleaseDC
SetCapture
GetClipboardData
SetClassLongA
ShowWindow
ActivateKeyboardLayout
PeekMessageA
MessageBeep
GetKeyNameTextA
SetScrollRange
CharNextW
EnableWindow
SetScrollPos
TrackPopupMenu
GetPropA
EnumChildWindows
GetDlgItem
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
Sections
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC7 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC2 Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC6 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC3 Size: 512B - Virtual size: 209B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC0 Size: 1024B - Virtual size: 971B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 810B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ