Static task
static1
Behavioral task
behavioral1
Sample
076b23ab8502028af248d12aee2ab88c_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
076b23ab8502028af248d12aee2ab88c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
076b23ab8502028af248d12aee2ab88c_JaffaCakes118
-
Size
104KB
-
MD5
076b23ab8502028af248d12aee2ab88c
-
SHA1
2272080240c879f45e60b43f05f01505eb49552f
-
SHA256
5216b83a7c82f3e707a8a1772607af4934466d03871f6b11ca1547a7261057a1
-
SHA512
ea248d7e36e2ccc7c7b329e51c694dd1814c22c0b7415c6fc97f11b34309ccfcb9fae52a98bf10646740ed778313a975322ae4498a23a11bf42bcee4b3ea7249
-
SSDEEP
3072:SVIHUz57tZzYH3Df2hJVlrMqqDLy/YeX:SzztXUooqqDLuz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 076b23ab8502028af248d12aee2ab88c_JaffaCakes118
Files
-
076b23ab8502028af248d12aee2ab88c_JaffaCakes118.dll windows:4 windows x86 arch:x86
3edb688fe812a8c2225cc0211293006c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTickCount
WideCharToMultiByte
lstrcpyA
DeleteFileA
FormatMessageA
FindResourceA
LoadResource
LockResource
GlobalLock
GlobalAlloc
GlobalSize
InterlockedDecrement
LocalFree
LocalAlloc
GetLocaleInfoA
GetSystemTimeAsFileTime
MultiByteToWideChar
GetCurrentThreadId
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
MoveFileA
GlobalUnlock
GlobalFree
GetTempFileNameA
lstrlenA
VirtualProtect
GetCurrentProcessId
GetCommandLineA
SetUnhandledExceptionFilter
WriteFile
UnhandledExceptionFilter
GetSystemInfo
GetEnvironmentStringsW
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
RtlUnwind
GetVersionExA
InterlockedExchange
VirtualQuery
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
user32
EndPaint
wsprintfA
CharNextA
SetFocus
SetWindowLongA
RegisterClipboardFormatA
GetClipboardFormatNameA
GetMessageA
TranslateMessage
DispatchMessageA
LoadStringA
LoadCursorA
CreateWindowExA
RegisterClassA
PostMessageA
IsWindow
BeginPaint
DefWindowProcA
DestroyWindow
GetWindowLongA
advapi32
RegCloseKey
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegOpenKeyA
gdi32
GetStockObject
ole32
OleRun
StgIsStorageFile
StgCreateDocfile
OleCreateDefaultHandler
ReleaseStgMedium
StringFromGUID2
OleInitialize
OleUninitialize
OleLoad
StgOpenStorage
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ