Static task
static1
Behavioral task
behavioral1
Sample
f4e0b984b65f1c9bcc555897732fc527_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f4e0b984b65f1c9bcc555897732fc527_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f4e0b984b65f1c9bcc555897732fc527_JaffaCakes118
-
Size
179KB
-
MD5
f4e0b984b65f1c9bcc555897732fc527
-
SHA1
c3a066f885b1584cb3ab3167ef990d8b6a36fc3b
-
SHA256
dcb32e7b7bfb4f9c48d0662cfe8b2b6e45175f5eb21483ef041f8140d18ae877
-
SHA512
098dec8e6603d3b627ed3df62ddeaa34d4edbec9bb728e56475151192af4fd3f29b8111139919c7dd31dc7b1b6f68bc0f86be6dbca06546f61d7de98d40a57ef
-
SSDEEP
3072:4gc+CQ2bpfK81zP/WfSOGAbrzHJzj4Yph24d2kky1iZmSBGafogriC9BDMqqDLyK:4/+CQ2bpfp1r/WfSOGAbrzHJzj4Yph2g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4e0b984b65f1c9bcc555897732fc527_JaffaCakes118
Files
-
f4e0b984b65f1c9bcc555897732fc527_JaffaCakes118.dll windows:4 windows x86 arch:x86
97f6da5756d43f170c64407f982a2c3d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
MultiByteToWideChar
InterlockedCompareExchange
Sleep
InterlockedExchange
GlobalFree
GlobalAlloc
WaitForSingleObject
WriteFile
CreateEventA
lstrlenA
CreateFileW
GetTempFileNameW
GetTickCount
GetModuleFileNameA
lstrcatA
lstrcpyA
CloseHandle
InterlockedDecrement
InterlockedIncrement
lstrlenW
GetVersionExA
GetProcAddress
LocalAlloc
LocalFree
LoadLibraryExA
LoadLibraryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LoadLibraryW
DisableThreadLibraryCalls
VirtualProtect
DeleteFileW
GetCommandLineA
user32
CharNextA
wsprintfW
CopyRect
ReleaseDC
GetDC
BeginPaint
MapWindowPoints
GetWindowRect
OffsetRect
EndPaint
ClientToScreen
SetRect
GetPropA
ShowWindow
GetParent
GetSysColor
FillRect
GetClientRect
GetDlgItem
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
gdi32
StretchBlt
SetBkColor
DeleteObject
DeleteDC
SetTextColor
BitBlt
CreateSolidBrush
CreateCompatibleDC
SelectObject
SelectPalette
RealizePalette
ole32
CoTaskMemFree
StringFromCLSID
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoTaskMemAlloc
msvcrt
__CxxFrameHandler
malloc
_adjust_fdiv
free
_initterm
_vsnprintf
_amsg_exit
_XcptFilter
wcslen
wcscpy
_except_handler3
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ