Static task
static1
Behavioral task
behavioral1
Sample
0441916de1081c830d00fda10ae07482_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0441916de1081c830d00fda10ae07482_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
0441916de1081c830d00fda10ae07482_JaffaCakes118
-
Size
1.8MB
-
MD5
0441916de1081c830d00fda10ae07482
-
SHA1
0b6212efcec3ff083482d60929afe890967a9729
-
SHA256
b4f8222ec520fe9c0c009d76449fa8d110c0c9f93df3259a1df6cd5c9c575e4b
-
SHA512
92182634be011e1e834cf236a10c2478ed0325712fa1ea4673ddcf330a8185f867ba559e2c70dc74184fce7d517de5026687820ef3f38788a00047daaa30768c
-
SSDEEP
49152:dNxkHCYeTmoyejcNnzQRldUyKodyAWvULXC:GiYeTbncJzQ/dBKodyAWv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0441916de1081c830d00fda10ae07482_JaffaCakes118
Files
-
0441916de1081c830d00fda10ae07482_JaffaCakes118.dll windows:6 windows x86 arch:x86
04af1fa3ad8e576a481175528db0c046
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAlloc
VirtualQuery
Sleep
AddVectoredExceptionHandler
GetTickCount64
GetProcAddress
MultiByteToWideChar
Beep
VirtualProtect
GetModuleHandleA
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalAlloc
GlobalLock
GlobalUnlock
GetCommandLineA
WriteConsoleW
HeapSize
SetStdHandle
GetCurrentProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapAlloc
HeapFree
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
VirtualFree
GetProcessHeap
WriteProcessMemory
GetLastError
FormatMessageW
WideCharToMultiByte
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
CloseHandle
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
EncodePointer
DecodePointer
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetCurrentThread
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
LoadLibraryExW
GetVersionExW
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
LoadLibraryW
RtlUnwind
RaiseException
ReadFile
RemoveDirectoryW
DeleteFileW
ExitProcess
GetModuleHandleExW
GetFileSizeEx
GetStdHandle
GetFileType
user32
SetWindowLongW
CallWindowProcW
FlashWindowEx
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetKeyState
GetCursor
ClientToScreen
SetCursor
GetClientRect
SetCursorPos
GetAsyncKeyState
FindWindowW
d3dx9_43
D3DXAssembleShader
winmm
PlaySoundA
imm32
ImmSetCompositionWindow
ImmGetContext
Sections
.text Size: 886KB - Virtual size: 885KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 573KB - Virtual size: 681KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ