niflik
Static task
static1
Behavioral task
behavioral1
Sample
f3f59b9462443891c86af5b7e2e6f2ec_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3f59b9462443891c86af5b7e2e6f2ec_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f3f59b9462443891c86af5b7e2e6f2ec_JaffaCakes118
-
Size
20KB
-
MD5
f3f59b9462443891c86af5b7e2e6f2ec
-
SHA1
f5ffaf177a24de9ed4c8d58435f1c3065e4fc9d9
-
SHA256
5f568e1261935ce4239e624003b77b1c52d5a50e2decea855ed39b5b4d9b8f93
-
SHA512
63ec3e1b8bc105356954060b6a63c28221a04866de2aabbb744dc16d8a172a4bbb4b7e51bf94f7a5c8fffb9f413d2ced60f608251a77b6970b63cb52e4dd1183
-
SSDEEP
384:eiXaxooMgaqSPWcohanZMvCOC45K6FvyaJt921myZ:3NoMgaqSPAYK7Fq2L2Qy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3f59b9462443891c86af5b7e2e6f2ec_JaffaCakes118
Files
-
f3f59b9462443891c86af5b7e2e6f2ec_JaffaCakes118.dll windows:4 windows x86 arch:x86
e167f8fbb7de983d66e769efb74af147
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CallWindowProcW
RegisterClassExW
UpdateWindow
TranslateMessage
ShowWindow
wsprintfA
SetWindowTextA
SetMenuItemBitmaps
SetFocus
SendMessageA
RegisterClassExA
RegisterClassA
PostQuitMessage
MoveWindow
MessageBoxA
MessageBeep
LoadMenuA
LoadIconA
LoadCursorA
LoadBitmapA
IsWindowUnicode
GetWindowModuleFileNameA
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetMessageA
GetMenuState
GetDlgItem
GetCursorPos
EndDialog
EnableMenuItem
DispatchMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
CreateDialogIndirectParamA
CheckMenuItem
CharUpperA
kernel32
lstrlenA
lstrcatA
WriteFile
SystemTimeToFileTime
SleepEx
Sleep
RtlZeroMemory
RtlMoveMemory
ReadFile
OpenMutexA
LoadLibraryExA
LoadLibraryA
HeapCreate
GlobalAlloc
GetWindowsDirectoryA
GetVolumeInformationA
GetTickCount
GetSystemTime
GetProcessHeaps
GetModuleHandleA
GetModuleFileNameA
GetLogicalDriveStringsA
GetDriveTypeA
GetCommandLineA
FreeLibrary
FlushViewOfFile
ExitThread
ExitProcess
DeviceIoControl
CreateFileA
BeginUpdateResourceA
CloseHandle
FreeLibraryAndExitThread
comdlg32
GetOpenFileNameA
GetSaveFileNameA
comctl32
CreateToolbarEx
advapi32
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
gdi32
SaveDC
GetWindowOrgEx
GetStockObject
ws2_32
connect
recv
socket
setsockopt
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ