Static task
static1
Behavioral task
behavioral1
Sample
f32d2394c10c2b8cc1b2137680622906_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f32d2394c10c2b8cc1b2137680622906_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
f32d2394c10c2b8cc1b2137680622906_JaffaCakes118
-
Size
112KB
-
MD5
f32d2394c10c2b8cc1b2137680622906
-
SHA1
b31e7814b30e1de5324e83a30ebebfc82eaf87c0
-
SHA256
77c1a4681e654b383cb9b3467504092a2ba4c01cacc535e1b9ab5c0cf119570f
-
SHA512
6ac0ccc88761b1a684833c78ce704583d491878216c63cb2ff0ddb1963887ed69d687dd3f46b720e1a12b49edc22935e38432fb056143465e9b35ef18400f9db
-
SSDEEP
1536:vF8CMbNjRu3gpVFQ61XrqDOFj68dIOrAlTnrDlLGOb7RskcyjZhFgibpE/SmVGIC:t8RbNNV3q46WIOraMOikJDgilwAIuTV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f32d2394c10c2b8cc1b2137680622906_JaffaCakes118
Files
-
f32d2394c10c2b8cc1b2137680622906_JaffaCakes118.dll windows:4 windows x86 arch:x86
54ffe6977522f846339ea0660bc662ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
VirtualProtect
GetCommandLineA
GlobalFree
LocalAlloc
LocalFree
GetLastError
CreateFileW
lstrlenW
GetVolumePathNameW
GetFileAttributesExW
CloseHandle
InterlockedIncrement
FreeLibrary
GetProcAddress
LoadLibraryW
DisableThreadLibraryCalls
lstrcpynW
InitializeCriticalSection
DeleteCriticalSection
CompareStringW
LeaveCriticalSection
GetTickCount
EnterCriticalSection
GetFileAttributesW
RemoveDirectoryW
LockResource
LoadResource
FindResourceW
FormatMessageW
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetModuleHandleW
GetWindowsDirectoryW
GetModuleFileNameW
GlobalLock
GlobalUnlock
WideCharToMultiByte
HeapAlloc
HeapReAlloc
GetUserDefaultLangID
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
SetLastError
CommConfigDialogW
user32
EndDialog
IsWindow
SetForegroundWindow
SetDlgItemInt
MessageBoxW
GetDlgItemInt
GetDlgItemTextW
CharUpperBuffW
DialogBoxParamW
wsprintfW
GetClientRect
MapWindowPoints
GetWindowRect
GetDlgItem
SendMessageW
LoadStringW
EnableWindow
SetFocus
GetFocus
SetCursor
LoadCursorW
SendDlgItemMessageW
LoadIconW
WinHelpW
SetWindowLongW
GetWindowLongW
MoveWindow
GetMenuItemInfoW
GetMenuItemCount
DeleteMenu
SetMenuItemInfoW
rpcrt4
UuidCreate
msvcrt
_wcsnicmp
_vsnwprintf
malloc
_XcptFilter
_adjust_fdiv
_amsg_exit
_initterm
free
strchr
atoi
time
wcstoul
wcsncpy
_wcsicmp
swprintf
iswspace
memmove
wcscpy
iswdigit
wcslen
wcscmp
wcsspn
_except_handler3
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ