Static task
static1
Behavioral task
behavioral1
Sample
0afbb62681bcd3e15ffc2c458fefc7ff_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0afbb62681bcd3e15ffc2c458fefc7ff_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0afbb62681bcd3e15ffc2c458fefc7ff_JaffaCakes118
-
Size
52KB
-
MD5
0afbb62681bcd3e15ffc2c458fefc7ff
-
SHA1
9335157a7610dfd8672123124dde588ecf6541ba
-
SHA256
7efb5980829a2bff97108d955d854341cc269407d0764b2021b194ed5546f6de
-
SHA512
9134c44f7575a4eefc426732d0904d8fb2322867eb203286b37a402aedb0fb58dd11a241576068ffb37c322f8f2b5a9a4ba88aa44393b01eaefd3ea301a6261a
-
SSDEEP
768:8CjbJcF89glT3AT+LrDOWgz6F3Dn9FHJ0i1lt7b2MVBS+H+1ozQqx8:X12lTwT+ryWlF3DnrP1GMViozQW8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0afbb62681bcd3e15ffc2c458fefc7ff_JaffaCakes118
Files
-
0afbb62681bcd3e15ffc2c458fefc7ff_JaffaCakes118.dll windows:4 windows x86 arch:x86
97076f95a9fb5298c3061878e7b94a59
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
VirtualFree
HeapCreate
HeapDestroy
VirtualAlloc
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetVersion
GetCurrentThreadId
HeapFree
GetProcessHeap
HeapAlloc
lstrcmpiA
GetStartupInfoA
GetFileType
FreeLibrary
GetEnvironmentStringsW
RtlUnwind
GetCommandLineA
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetStringTypeW
user32
GetSystemMetrics
FillRect
DrawFocusRect
GetWindowTextA
OffsetRect
CopyRect
GetSysColor
FrameRect
InflateRect
GetSysColorBrush
GetWindowRect
GetWindowDC
GetClientRect
CallWindowProcA
ReleaseDC
DefWindowProcA
CallNextHookEx
EnumChildWindows
GetFocus
SetWindowLongA
SendMessageA
RedrawWindow
GetClassNameA
GetWindowLongA
GetWindowTextLengthA
GetParent
EnumThreadWindows
UnhookWindowsHookEx
SetWindowsHookExA
DrawTextA
GetDC
gdi32
GetPixel
GetTextMetricsA
Ellipse
CreateEllipticRgnIndirect
SelectClipRgn
SetTextColor
MoveToEx
LineTo
GetStockObject
CreatePen
SetPixel
CreateSolidBrush
DeleteObject
DeleteDC
CreateCompatibleDC
SetBkMode
SelectObject
CreateCompatibleBitmap
BitBlt
GetObjectA
GetTextExtentPoint32A
Arc
msimg32
GradientFill
comctl32
_TrackMouseEvent
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE