Static task
static1
Behavioral task
behavioral1
Sample
f547bc06efcd8d74523b6b6a6945c2b7_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f547bc06efcd8d74523b6b6a6945c2b7_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f547bc06efcd8d74523b6b6a6945c2b7_JaffaCakes118
-
Size
104KB
-
MD5
f547bc06efcd8d74523b6b6a6945c2b7
-
SHA1
69efd446fc49691d26d6d01f4242f244ba6cef9a
-
SHA256
b8c7b99770710a36b798da1bb41c494e8f07e93a75858a00e77b50362de21443
-
SHA512
329ec093e2b74171fd8cd5ef2bcb54a1ad32072c24dfd3129829c892dda38cd866c8e1f7f09203c38a558052228bd15f0c207b9611a324c9a7b15edeaeefe4ec
-
SSDEEP
1536:074La+QhzWGWvnlJ5B/+VEHOrLA5/e94v6HFInl4BDozB:0ia7tWGWflJn7HOrk5/u46HHDozB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f547bc06efcd8d74523b6b6a6945c2b7_JaffaCakes118
Files
-
f547bc06efcd8d74523b6b6a6945c2b7_JaffaCakes118.dll windows:4 windows x86 arch:x86
53bf610872cee0771eb89da647fd85ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
HeapAlloc
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetCurrentThreadId
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
RtlUnwind
lstrcmpiW
lstrcmpW
lstrlenA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetTickCount
GlobalSize
GetStringTypeW
VirtualProtect
FreeEnvironmentStringsW
GetCommandLineA
user32
SetPropW
GetPropW
GetWindowRect
SetWindowLongW
SetWindowLongA
GetClassNameW
SendMessageW
GetWindowLongW
CallNextHookEx
SetWindowsHookExW
RemovePropW
CallWindowProcW
GetClientRect
HideCaret
MapWindowPoints
GetMenuState
GetParent
wsprintfA
ShowCaret
CharNextW
DrawTextW
IntersectRect
DrawFocusRect
ValidateRect
InvalidateRect
GetDC
GetSystemMetrics
IsWindowEnabled
GetWindow
InflateRect
OffsetRect
ReleaseDC
UpdateWindow
SetFocus
GetCapture
PtInRect
GetFocus
SetScrollRange
ShowWindow
IsWindowVisible
GetSubMenu
ScreenToClient
GetMenuStringA
GetMenuItemCount
GetMenuItemID
InsertMenuA
ReleaseCapture
InSendMessage
EnableWindow
CopyRect
GetWindowLongA
IsWindowUnicode
gdi32
DeleteMetaFile
CloseMetaFile
CreateDCA
CopyMetaFileA
PatBlt
SetBkColor
GetTextExtentPointW
ExtTextOutW
SelectObject
SetTextColor
DeleteDC
ole32
CoGetMalloc
OleDuplicateData
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ