Static task
static1
Behavioral task
behavioral1
Sample
fec50e3fd9cecaa9292b12061c7c9a93_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fec50e3fd9cecaa9292b12061c7c9a93_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fec50e3fd9cecaa9292b12061c7c9a93_JaffaCakes118
-
Size
101KB
-
MD5
fec50e3fd9cecaa9292b12061c7c9a93
-
SHA1
7d198818711cb0340a93e34c0e1856cff7438be6
-
SHA256
0806959efee186d62a38035fdbf05a2bf40bf9e593523cf06786f10b3675724e
-
SHA512
fe9dde23cad2060a97fb43a46bb7d6ab73815b6983a88f89ecc6db88422e62874a577aba5fe95e472db84a664f7340f53dbacb64a238f461891fbb0655392b21
-
SSDEEP
1536:l7aH4r1ffGzw31I4UzAM49E0UxsGzcvrvpdsWrjF7KTHzZJwL:Bp1Gzw3C4UzAVo+vvrAeF7Kb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fec50e3fd9cecaa9292b12061c7c9a93_JaffaCakes118
Files
-
fec50e3fd9cecaa9292b12061c7c9a93_JaffaCakes118.dll windows:4 windows x86 arch:x86
b4986f8760e9f7ed4df01a027f9afaba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentDirectoryW
GetCommandLineW
WriteConsoleOutputCharacterW
SearchPathA
SetConsoleNumberOfCommandsW
GetPrivateProfileIntA
ClearCommBreak
GetFileSize
SetConsoleWindowInfo
GetBinaryTypeW
SetSystemTimeAdjustment
GlobalFix
EndUpdateResourceA
GetDefaultCommConfigA
OpenProfileUserMapping
CancelIo
HeapSummary
SetCommState
GetTempPathW
MoveFileW
lstrcmpW
QueryPerformanceFrequency
VirtualAlloc
GetVolumeInformationW
PeekConsoleInputW
lstrcpyA
GetVersion
FindNextFileW
user32
MenuWindowProcW
SetWindowPlacement
DrawIcon
SystemParametersInfoW
EnumDesktopWindows
GetKeyState
SetMenuItemInfoA
CreatePopupMenu
ToUnicode
DdeEnableCallback
SetCaretBlinkTime
ChildWindowFromPointEx
InsertMenuA
SetClassWord
BroadcastSystemMessageA
RedrawWindow
RegisterTasklist
wsprintfW
gdi32
GetGraphicsMode
RemoveFontResourceA
GetObjectType
GetCharWidth32A
GdiConvertAndCheckDC
CreatePalette
GdiCreateLocalEnhMetaFile
GetEnhMetaFilePixelFormat
ExtCreatePen
GetRandomRgn
GdiEntry7
UnrealizeObject
GetRegionData
CopyEnhMetaFileW
EnumICMProfilesW
CreateColorSpaceA
CloseMetaFile
GetMiterLimit
SetRelAbs
EnumFontFamiliesW
UpdateICMRegKeyA
GetDIBits
SetWindowExtEx
GdiConvertRegion
SetMapMode
FloodFill
DeleteEnhMetaFile
GdiInitSpool
ole32
CoSetProxyBlanket
HPALETTE_UserMarshal
BindMoniker
WriteClassStm
GetHGlobalFromILockBytes
CoIsOle1Class
CoFreeAllLibraries
CreateDataCache
IsValidPtrOut
GetHGlobalFromStream
CoSetState
OleLoadFromStream
CoGetCallContext
CoCreateFreeThreadedMarshaler
WdtpInterfacePointer_UserMarshal
SNB_UserFree
CoDosDateTimeToFileTime
OleRegEnumVerbs
UtGetDvtd16Info
CoGetMarshalSizeMax
PropVariantCopy
ProgIDFromCLSID
CreateErrorInfo
HACCEL_UserFree
OleConvertIStorageToOLESTREAM
Sections
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 54KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 34KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ