Static task
static1
Behavioral task
behavioral1
Sample
1664b03db99ac362a0daa14b73f85392_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1664b03db99ac362a0daa14b73f85392_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
1664b03db99ac362a0daa14b73f85392_JaffaCakes118
-
Size
104KB
-
MD5
1664b03db99ac362a0daa14b73f85392
-
SHA1
9d3b8307b55a06e42567ae08eb4559f1afd161b5
-
SHA256
46a988145a909f15d9ef292c8d5ba22bc6009bbf2e452df5c0526624f0472254
-
SHA512
915ee4cfaf1565915f0d45656ee680bab0f80111d1e162f6183f852eea892cb48af589ec7aa6484fd8398af4a218b9e25325522fea54d48ca379aa96d56ca2c6
-
SSDEEP
1536:RUildvZVlzVYxruYbSgwKko7NuakWlD1hFdS+KOnvLEy077uz+HFcTdoe1:BzJ2xVbSSjBuakOFbnvIyhdTdoe1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1664b03db99ac362a0daa14b73f85392_JaffaCakes118
Files
-
1664b03db99ac362a0daa14b73f85392_JaffaCakes118.dll windows:4 windows x86 arch:x86
4a519ed8098d7a81eda00446ffe227dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapReAlloc
VirtualAlloc
HeapAlloc
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
GetCPInfo
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
RtlUnwind
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetWindowsDirectoryW
Sleep
GetLocalTime
SetEvent
VirtualProtect
CreateThread
GetProcessHeap
CloseHandle
InterlockedDecrement
InterlockedIncrement
lstrlenW
LocalAlloc
LocalFree
lstrcmpW
GetCommandLineA
SetHandleCount
GetStringTypeW
user32
GetSysColor
DrawTextW
KillTimer
SetTimer
ReleaseDC
GetDC
GetSysColorBrush
GetSubMenu
EnableMenuItem
SendDlgItemMessageW
FindWindowExW
SetDlgItemTextW
WinHelpW
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
CheckMenuItem
TrackPopupMenu
DestroyMenu
PostMessageW
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
SetWindowTextW
DialogBoxParamW
SetCursor
EnableWindow
GetActiveWindow
ShowWindow
LoadStringW
InvalidateRect
IsWindow
SendMessageW
GetDlgItem
GetClientRect
EndDialog
wsprintfW
GetParent
GetWindowTextLengthW
GetWindowTextW
GetMenuItemID
LoadIconW
MessageBoxW
advapi32
GetSidIdentifierAuthority
RegSetValueExW
SetSecurityDescriptorSacl
GetAce
InitializeAcl
AddAce
GetAclInformation
GetSecurityDescriptorLength
LookupAccountSidW
GetSidSubAuthority
GetSidSubAuthorityCount
IsValidSid
MakeSelfRelativeSD
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
gdi32
SelectObject
PatBlt
SetBkColor
SetTextColor
GetTextMetricsW
ole32
StringFromGUID2
CoCreateInstance
StringFromIID
CLSIDFromString
CoTaskMemFree
CoUninitialize
Sections
.text Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ