Static task
static1
Behavioral task
behavioral1
Sample
077b926188fd1d85f79398dcc61ec972_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
077b926188fd1d85f79398dcc61ec972_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
077b926188fd1d85f79398dcc61ec972_JaffaCakes118
-
Size
112KB
-
MD5
077b926188fd1d85f79398dcc61ec972
-
SHA1
b5b5cd59ff8d4017b95d1f1fd769a0b0cceab84b
-
SHA256
c24c612ab42ac1f9a72ee8a674cb402cdcbae53edbcb715c744be817a82d48ca
-
SHA512
b039bf82468339d7215916ecd3e95e5a2ec65354f1d957850d49bb3ea4601dd7f5ca6d94b23e7b05f453f4d51464f9f033eb283239c6db01ede8d6634b1bf922
-
SSDEEP
1536:vojCMkQd3gzVFH61XaqDOFj68dS6A2TnrDlLoOb7RskcyjZhFgibpE/SmVGIAn8x:wjRuVzq46WS6BmOikJDgilwAIpTV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 077b926188fd1d85f79398dcc61ec972_JaffaCakes118
Files
-
077b926188fd1d85f79398dcc61ec972_JaffaCakes118.dll windows:4 windows x86 arch:x86
54ffe6977522f846339ea0660bc662ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
VirtualProtect
GetCommandLineA
GlobalFree
LocalAlloc
LocalFree
GetLastError
CreateFileW
lstrlenW
GetVolumePathNameW
GetFileAttributesExW
CloseHandle
InterlockedIncrement
FreeLibrary
GetProcAddress
LoadLibraryW
DisableThreadLibraryCalls
lstrcpynW
InitializeCriticalSection
DeleteCriticalSection
CompareStringW
LeaveCriticalSection
GetTickCount
EnterCriticalSection
GetFileAttributesW
RemoveDirectoryW
LockResource
LoadResource
FindResourceW
FormatMessageW
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetModuleHandleW
GetWindowsDirectoryW
GetModuleFileNameW
GlobalLock
GlobalUnlock
WideCharToMultiByte
HeapAlloc
HeapReAlloc
GetUserDefaultLangID
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
SetLastError
CommConfigDialogW
user32
EndDialog
IsWindow
SetForegroundWindow
SetDlgItemInt
MessageBoxW
GetDlgItemInt
GetDlgItemTextW
CharUpperBuffW
DialogBoxParamW
wsprintfW
GetClientRect
MapWindowPoints
GetWindowRect
GetDlgItem
SendMessageW
LoadStringW
EnableWindow
SetFocus
GetFocus
SetCursor
LoadCursorW
SendDlgItemMessageW
LoadIconW
WinHelpW
SetWindowLongW
GetWindowLongW
MoveWindow
GetMenuItemInfoW
GetMenuItemCount
DeleteMenu
SetMenuItemInfoW
rpcrt4
UuidCreate
msvcrt
_wcsnicmp
_vsnwprintf
malloc
_XcptFilter
_adjust_fdiv
_amsg_exit
_initterm
free
strchr
atoi
time
wcstoul
wcsncpy
_wcsicmp
swprintf
iswspace
memmove
wcscpy
iswdigit
wcslen
wcscmp
wcsspn
_except_handler3
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ