e:\SpeedNet\BIN-new\Release\1down2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
09657b1fb3e99a46aa97d7512d055413_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09657b1fb3e99a46aa97d7512d055413_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
09657b1fb3e99a46aa97d7512d055413_JaffaCakes118
-
Size
300KB
-
MD5
09657b1fb3e99a46aa97d7512d055413
-
SHA1
418f8f1a25a5535e2507179263602d35468f5eeb
-
SHA256
5956a4120810f4c5d51c1bc2728bd68950d904f7de7f2376c369fd1206c338b0
-
SHA512
3c6d9661301856fcc75c8ac485431947947d30030132eb8e19398cdd7e1e773800f6918c7ad12fceaf3e88fab5a2e78961c73ad1737667f81ecaab785719c07f
-
SSDEEP
6144:tLoRd1ZKQYWpkkYWtwQq/6pn8fgQXhN7to1FTBdmsBvgOXvpBb1xK:tL81UzkYjHU8FhN7to1FTF9gOfK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09657b1fb3e99a46aa97d7512d055413_JaffaCakes118
Files
-
09657b1fb3e99a46aa97d7512d055413_JaffaCakes118.dll windows:4 windows x86 arch:x86
e28df943868a7912747c75a2445a5746
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ws2_32
WSAStartup
gethostbyname
advapi32
SetServiceStatus
SetSecurityDescriptorDacl
CreateProcessAsUserA
OpenServiceA
CloseServiceHandle
OpenProcessToken
DeleteService
RegSetValueExA
RegisterServiceCtrlHandlerA
RegQueryValueExA
CreateServiceA
RegCreateKeyA
StartServiceA
RegOpenKeyExA
QueryServiceStatus
OpenSCManagerA
ControlService
RegOpenKeyA
RegCloseKey
RegEnumKeyA
RegCreateKeyExA
RegDeleteKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
user32
PostQuitMessage
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
CharUpperA
CharLowerBuffW
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageA
CreateWindowExA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
SendMessageA
GetWindowThreadProcessId
UnhookWindowsHookEx
GetSystemMetrics
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
LoadCursorA
ValidateRect
PeekMessageA
GetKeyState
DispatchMessageA
CallNextHookEx
SetWindowsHookExA
UnregisterClassA
GetWindowTextA
SetWindowTextA
PtInRect
GetClassNameA
GetWindowRect
GetDlgCtrlID
GetWindow
ClientToScreen
GetFocus
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowPlacement
IsIconic
SystemParametersInfoA
SetWindowPos
SetWindowLongA
CallWindowProcA
DefWindowProcA
CopyRect
AdjustWindowRectEx
RegisterClassA
GetClassInfoA
GetClassInfoExA
psapi
EnumProcessModules
EnumProcesses
GetModuleBaseNameW
kernel32
GlobalLock
GlobalAlloc
GlobalFree
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetProcAddress
GetModuleHandleA
InterlockedDecrement
FindClose
FindFirstFileA
GetFileAttributesA
GetFileSize
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetThreadLocale
DuplicateHandle
GlobalUnlock
GetFullPathNameA
InterlockedIncrement
GlobalGetAtomNameA
lstrcmpA
GlobalFlags
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GetLocaleInfoA
GetCPInfo
GetOEMCP
VirtualAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
GetSystemTimeAsFileTime
ExitProcess
GetCommandLineA
RaiseException
RtlUnwind
SetStdHandle
GetFileType
HeapSize
GetACP
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
GetExitCodeProcess
SetEnvironmentVariableA
FormatMessageA
LocalFree
LocalAlloc
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindResourceA
LoadResource
LockResource
SizeofResource
GetCurrentThreadId
GetCurrentProcessId
HeapFree
GetProcessHeap
HeapAlloc
WriteProcessMemory
ReadProcessMemory
VirtualQueryEx
GetCurrentProcess
ReleaseMutex
CreateMutexA
OpenMutexA
CreateThread
DeleteFileA
GetVersion
CloseHandle
GetVersionExA
GetFileTime
CompareStringA
CreateToolhelp32Snapshot
GetModuleFileNameA
WritePrivateProfileStringA
Process32Next
GetPrivateProfileStringA
SetLastError
GetLastError
InterlockedExchange
CreateDirectoryA
MultiByteToWideChar
CompareStringW
GetSystemDirectoryA
TerminateProcess
CreateProcessA
Sleep
TerminateThread
WideCharToMultiByte
GetPrivateProfileIntA
OpenProcess
GetTickCount
WaitForSingleObject
Process32First
lstrlenA
CreateFileA
InterlockedCompareExchange
GetVolumeInformationA
gdi32
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
GetDeviceCaps
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
shell32
SHGetFolderPathA
SHGetSpecialFolderPathA
shlwapi
UrlUnescapeA
PathStripToRootA
PathFindFileNameA
PathIsUNCA
oleaut32
VariantInit
VariantChangeType
VariantClear
wininet
InternetCrackUrlA
InternetOpenUrlA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetCanonicalizeUrlA
InternetQueryDataAvailable
InternetQueryOptionA
Exports
Exports
InstallService
RundllInstall
RundllUninstall
ServiceMain
UninstallService
Sections
.text Size: 200KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ