Static task
static1
Behavioral task
behavioral1
Sample
ff33182f3bdf7804c29de4780b04bc4d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff33182f3bdf7804c29de4780b04bc4d_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
ff33182f3bdf7804c29de4780b04bc4d_JaffaCakes118
-
Size
355KB
-
MD5
ff33182f3bdf7804c29de4780b04bc4d
-
SHA1
3daea3c98df5523508570c83d292a2f8894a49db
-
SHA256
bf4d638fce6b00f40a764896b95715b22c0c2904e784e20ba827a44310918698
-
SHA512
47203379373edf68505c9cf865dc10930dc3c4df9cc7d03de3496d4ba407c44257723cf438a1c87850e12e7c9c755b708c243babffe9050f4fe18571d54f2215
-
SSDEEP
6144:z9aDmmWuYxqOBN/a1COMjlV5PRmz0Qfikp02c/tq4n32H0AWNj6JCQ:RaymWuYxqY/aY/lVZR6S/tqmdn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff33182f3bdf7804c29de4780b04bc4d_JaffaCakes118
Files
-
ff33182f3bdf7804c29de4780b04bc4d_JaffaCakes118.dll windows:4 windows x86 arch:x86
1609abd78d9e1f8758599e8040ea78b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
AddFontMemResourceEx
AddFontResourceA
AddFontResourceTracking
BitBlt
CancelDC
DeleteDC
AbortPath
CreateSolidBrush
GetCurrentPositionEx
CloseMetaFile
GetBrushOrgEx
AddFontResourceExA
GetPixel
BeginPath
ExtTextOutA
GetBrushOrgEx
AbortPath
SetTextColor
CancelDC
AddFontResourceTracking
CopyMetaFileA
AddFontMemResourceEx
GetCurrentPositionEx
DeleteDC
ClearBitmapAttributes
AddFontResourceA
GetBitmapBits
GetBrushOrgEx
GetBitmapBits
ClearBrushAttributes
SetTextColor
GetClipBox
AddFontMemResourceEx
RestoreDC
CancelDC
ExtTextOutA
CloseMetaFile
CloseFigure
DeleteObject
GetDCOrgEx
GetPixel
AbortPath
BitBlt
ClearBitmapAttributes
ExcludeClipRect
AddFontResourceW
CreateSolidBrush
AddFontMemResourceEx
DeleteObject
GetBrushOrgEx
GetPixel
ClearBrushAttributes
DeleteDC
AddFontResourceTracking
BeginPath
AddFontResourceExW
CancelDC
GetClipBox
kernel32
DeleteAtom
CreateProcessA
GetComputerNameA
GetStdHandle
GetCPInfo
OpenFile
GlobalFree
CopyFileExA
ReadFile
CopyFileExW
GetCommandLineA
GlobalFree
GetCommandLineA
ExitThread
CreateThread
SetLastError
DeleteFileA
GetFileSize
CopyFileW
CopyFileExW
WriteFile
GetComputerNameA
ReadConsoleA
DeleteAtom
FindFirstFileA
GetStdHandle
GetLastError
OpenFile
GetConsoleMode
CopyFileExA
ExitThread
GetCPInfo
OpenFileMappingA
CreateDirectoryA
FindAtomA
GetConsoleMode
DeleteAtom
GetCommandLineA
CopyFileA
CreateThread
GetComputerNameA
Sleep
CopyFileExA
SetLastError
DeleteFileA
GetFileSize
FindFirstFileA
comctl32
ImageList_LoadImageA
ImageList_DragShowNolock
ImageList_DragMove
ImageList_Read
ImageList_Copy
ImageList_DrawIndirect
ImageList_AddIcon
ImageList_Replace
ImageList_LoadImage
ImageList_DragLeave
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_Create
InitCommonControls
ImageList_EndDrag
ImageList_GetIcon
ImageList_AddMasked
ImageList_DrawEx
ImageList_Destroy
ImageList_GetImageCount
ImageList_Destroy
ImageList_Replace
ImageList_Draw
ImageList_Create
ImageList_GetDragImage
ImageList_ReplaceIcon
ImageList_AddIcon
ImageList_GetImageRect
ImageList_GetIcon
ImageList_Merge
ImageList_DrawEx
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 244B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ