Static task
static1
Behavioral task
behavioral1
Sample
0f0d036741e8f62798fcd6843bfe55a4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f0d036741e8f62798fcd6843bfe55a4_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
0f0d036741e8f62798fcd6843bfe55a4_JaffaCakes118
-
Size
84KB
-
MD5
0f0d036741e8f62798fcd6843bfe55a4
-
SHA1
a1ef5f4141cf22a24aa14406095d9914a5356dbe
-
SHA256
d9c11aa00b60b4d4e892e8eaec4d00eaaf8e301bd6da0424a2fe6864c82e7235
-
SHA512
839870bb7a1fa3f876990614d3b797b6b3ef921a6f696bedee2597365b6ff6af1769c14c81209d90a4e0aedd0b62d2a92f7063adcbbc7faae71bc68aff13fdd7
-
SSDEEP
1536:o9dahplTR37ImvatnYFPJ7jhkBYwmwn80Ds8Xck/+mwIH:o9dQlTRLTyyh5j+380QwBTV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f0d036741e8f62798fcd6843bfe55a4_JaffaCakes118
Files
-
0f0d036741e8f62798fcd6843bfe55a4_JaffaCakes118.dll windows:4 windows x86 arch:x86
83e0944dde02996b4fa28726519f0bac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comdlg32
ChooseColorW
ChooseFontW
CommDlgExtendedError
FindTextA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
PrintDlgExA
PrintDlgW
dwLBSubclass
dwOKSubclass
user32
GetScrollInfo
GetSubMenu
GetUserObjectSecurity
GetWindowRect
LoadAcceleratorsA
MoveWindow
RemoveMenu
SendMessageTimeoutA
SetClassLongA
SetPropA
SetTimer
SetWindowLongA
kernel32
GetUserDefaultLangID
GetStartupInfoA
GetOEMCP
GetModuleHandleA
GetLogicalDrives
GetComputerNameA
GetCommandLineA
GetACP
FindResourceExW
FindFirstChangeNotificationA
FatalAppExitW
ExitProcess
EnumSystemLanguageGroupsA
lstrcmpiW
WritePrivateProfileStructA
WaitNamedPipeW
VirtualProtect
TerminateJobObject
RtlFillMemory
PulseEvent
OpenMutexA
HeapCreate
HeapAlloc
GlobalUnfix
GetVersionExA
CloseHandle
EnumResourceNamesW
GetUserDefaultLCID
ole32
CoCreateInstance
dbghelp
SymMatchFileName
FindFileInPath
GetTimestampForLoadedLibrary
MiniDumpReadDumpStream
MiniDumpWriteDump
SymEnumSourceFiles
SymEnumerateSymbolsW
SymGetLinePrev
SymGetModuleInfoW64
SymGetSymPrev64
SymLoadModule64
comctl32
CreateUpDownControl
FlatSB_GetScrollProp
FlatSB_GetScrollRange
ImageList_DrawIndirect
ImageList_LoadImageA
ImageList_Read
ImageList_ReplaceIcon
ImageList_SetOverlayImage
InitCommonControlsEx
InitMUILanguage
InitializeFlatSB
CreateStatusWindowW
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ