fxCommonhid
Static task
static1
Behavioral task
behavioral1
Sample
fc2ebaf5a00f53ce46989144c9742e0c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc2ebaf5a00f53ce46989144c9742e0c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fc2ebaf5a00f53ce46989144c9742e0c_JaffaCakes118
-
Size
80KB
-
MD5
fc2ebaf5a00f53ce46989144c9742e0c
-
SHA1
cc0092eb3bc0fb732b862797e60f165af7db7b67
-
SHA256
de7ba1b8066a36c379893687a67feee6fce73fbdab86630ea0111516630b10f3
-
SHA512
d5549e2958f4053fcda7b3323ee0e10c98f2f5b9656a9d54f9218e92c7665789aadd370e09933dd7817bc57a7b354b4f1338599cec16ce1c0985d7cf20778f39
-
SSDEEP
1536:dL4B75JmAYJE7bqKK+hycmwjbmuGoxlh7midKTlPqGf8:dM3JmJq7bqKK+o3wjauGo3lmid+lPqGE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc2ebaf5a00f53ce46989144c9742e0c_JaffaCakes118
Files
-
fc2ebaf5a00f53ce46989144c9742e0c_JaffaCakes118.dll windows:4 windows x86 arch:x86
4c674d228dfe7fbfd7a2c54a9cdda0be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
GetSystemDirectoryA
InterlockedDecrement
GetCurrentProcessId
GetLastError
VirtualQuery
LocalFree
LoadLibraryA
WaitForSingleObject
SetLastError
GetProcAddress
HeapFree
InterlockedCompareExchange
GetTickCount
EnterCriticalSection
CopyFileA
GetSystemTimeAsFileTime
HeapAlloc
TryEnterCriticalSection
SetConsoleMode
CreateThread
FindFirstVolumeMountPointW
lstrcmpiA
IsValidCodePage
WriteProcessMemory
ReplaceFileW
WriteConsoleA
GetLocaleInfoA
ReadFileEx
SuspendThread
ReadConsoleInputW
IsValidLanguageGroup
GetSystemWindowsDirectoryA
CreateNamedPipeW
InitializeCriticalSection
lstrcmpiW
TerminateJobObject
WaitForSingleObjectEx
GetUserDefaultLCID
SystemTimeToTzSpecificLocalTime
GetFileAttributesA
CreateJobObjectW
ExitThread
GlobalMemoryStatus
GetCurrentActCtx
CreateWaitableTimerW
VirtualQueryEx
lstrcpynW
FindActCtxSectionStringW
EnumResourceLanguagesA
OpenJobObjectW
GetFileSizeEx
GlobalFindAtomA
GetDiskFreeSpaceExW
GetDriveTypeW
HeapReAlloc
SetWaitableTimer
GetTapeParameters
WriteFileEx
LockResource
LocalLock
SetConsoleTitleA
HeapCreate
GetShortPathNameW
LocalHandle
SetCommBreak
GlobalFlags
SetStdHandle
GetNumberOfConsoleInputEvents
GetConsoleCP
InterlockedExchangeAdd
DeleteTimerQueueTimer
WinExec
WriteProfileStringA
PostQueuedCompletionStatus
CreateRemoteThread
oleaut32
SysAllocStringLen
SysAllocString
shlwapi
StrToIntW
PathMakePrettyW
SHRegGetUSValueW
PathIsUNCServerW
StrCmpNIA
PathFindExtensionW
PathCombineW
StrCmpNIW
PathStripToRootW
AssocCreate
SHRegGetValueW
UrlCombineW
PathFindFileNameA
PathQuoteSpacesW
PathIsRelativeW
StrFormatByteSizeW
PathIsFileSpecW
StrStrA
SHStrDupW
SHGetValueW
PathRemoveExtensionW
StrDupW
PathAddExtensionW
StrStrIW
StrDupA
shell32
SHGetSpecialFolderPathW
SHGetSettings
SHGetFolderPathAndSubDirW
SHCreateDirectoryExW
DragQueryFileA
ExtractIconA
ShellExecuteExA
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ