Static task
static1
Behavioral task
behavioral1
Sample
0ed840e964d1ca9606d58ec2bd598af7_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ed840e964d1ca9606d58ec2bd598af7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0ed840e964d1ca9606d58ec2bd598af7_JaffaCakes118
-
Size
112KB
-
MD5
0ed840e964d1ca9606d58ec2bd598af7
-
SHA1
9d9fd01bd20194218c2b25144316e61911c54544
-
SHA256
29cff696cf652c2aa212f05d2013ce4f1b25cfd8451a95afa15868d2a62ab0c7
-
SHA512
2a0930ca2d730ef1f70195d3b58ff207c8851df8103ddb3d83208267bad6fdcfe820c43a6fbd4b8cc7bd6328ee30eff504c8cb50acd45f87115d89260630b4c8
-
SSDEEP
3072:+6Gl4a0JKk8TCap3r4wWp4EW2GrFCmiR6SlFyIrEDbypBH8FiGj:lG2jJKjTbp0wmOCmA6KTEDby39G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ed840e964d1ca9606d58ec2bd598af7_JaffaCakes118
Files
-
0ed840e964d1ca9606d58ec2bd598af7_JaffaCakes118.dll windows:4 windows x86 arch:x86
ccd022e2e86365ec8e306bc475e2a84b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
setupapi
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
shell32
ShellExecuteA
Shell_NotifyIconA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey
RegSetValueExA
kernel32
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetVersion
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
GetEnvironmentStringsA
HeapReAlloc
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LoadLibraryA
MultiByteToWideChar
RtlUnwind
SetFilePointer
SetHandleCount
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TerminateThread
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GetCurrentProcess
GetCommandLineA
CloseHandle
GetCPInfo
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
ExitProcess
DeviceIoControl
CreateThread
CreateFileA
CreateEventA
HeapFree
user32
IsIconic
IsWindowVisible
KillTimer
LoadAcceleratorsA
LoadBitmapA
LoadCursorA
LoadIconA
LoadStringA
MessageBoxA
MoveWindow
PostMessageA
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassA
RegisterClassExA
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageA
SetCapture
SetFocus
SetForegroundWindow
SetTimer
SetWindowLongA
InvalidateRect
SetWindowTextA
ShowWindow
TranslateAcceleratorA
TranslateMessage
UnregisterClassA
UpdateWindow
wsprintfA
GetSystemMetrics
GetParent
GetMessageA
GetMenu
GetForegroundWindow
GetFocus
GetDlgItem
GetDC
GetClientRect
FillRect
EndPaint
EndDialog
DrawTextA
DispatchMessageA
DialogBoxParamA
DefWindowProcA
CheckMenuItem
BeginPaint
GetWindowRect
SetWindowPos
GetWindowLongA
CreateWindowExA
gdi32
TextOutA
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
SetTextAlign
SetTextColor
CreateSolidBrush
DeleteDC
DeleteObject
ExtCreatePen
GetObjectA
GetPixel
GetStockObject
LineTo
MoveToEx
PolyBezier
SelectObject
SetBkColor
SetBkMode
BitBlt
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ