Static task
static1
Behavioral task
behavioral1
Sample
175fc45e144d4caa1ca0b067eae2987e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
175fc45e144d4caa1ca0b067eae2987e_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
175fc45e144d4caa1ca0b067eae2987e_JaffaCakes118
-
Size
112KB
-
MD5
175fc45e144d4caa1ca0b067eae2987e
-
SHA1
9241ca01842c73f8154fb96823c1c4fedbba6eac
-
SHA256
3da5d5aba2ddb1e8f5bee9d5091f9307fd8cf96c391fef75080e6eb7e6ca8bdf
-
SHA512
dcb141150dcaf37b9762518da00a40543ea03036e6e0e19142c87d39ecb6e7767e371d352f4729b37e832254d75c9390fe6af0b3fe380fa4a690fb0b7f7e949f
-
SSDEEP
1536:vDdCMswL3gMVFQ61X1qDOFj68dG/fAxTnrDlLGOb7RskcyjZhFgibpE/SmVGIAEE:bdRBVBq46WG/f+EOikJDgilwAIqTV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 175fc45e144d4caa1ca0b067eae2987e_JaffaCakes118
Files
-
175fc45e144d4caa1ca0b067eae2987e_JaffaCakes118.dll windows:4 windows x86 arch:x86
54ffe6977522f846339ea0660bc662ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
VirtualProtect
GetCommandLineA
GlobalFree
LocalAlloc
LocalFree
GetLastError
CreateFileW
lstrlenW
GetVolumePathNameW
GetFileAttributesExW
CloseHandle
InterlockedIncrement
FreeLibrary
GetProcAddress
LoadLibraryW
DisableThreadLibraryCalls
lstrcpynW
InitializeCriticalSection
DeleteCriticalSection
CompareStringW
LeaveCriticalSection
GetTickCount
EnterCriticalSection
GetFileAttributesW
RemoveDirectoryW
LockResource
LoadResource
FindResourceW
FormatMessageW
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetModuleHandleW
GetWindowsDirectoryW
GetModuleFileNameW
GlobalLock
GlobalUnlock
WideCharToMultiByte
HeapAlloc
HeapReAlloc
GetUserDefaultLangID
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
SetLastError
CommConfigDialogW
user32
EndDialog
IsWindow
SetForegroundWindow
SetDlgItemInt
MessageBoxW
GetDlgItemInt
GetDlgItemTextW
CharUpperBuffW
DialogBoxParamW
wsprintfW
GetClientRect
MapWindowPoints
GetWindowRect
GetDlgItem
SendMessageW
LoadStringW
EnableWindow
SetFocus
GetFocus
SetCursor
LoadCursorW
SendDlgItemMessageW
LoadIconW
WinHelpW
SetWindowLongW
GetWindowLongW
MoveWindow
GetMenuItemInfoW
GetMenuItemCount
DeleteMenu
SetMenuItemInfoW
rpcrt4
UuidCreate
msvcrt
_wcsnicmp
_vsnwprintf
malloc
_XcptFilter
_adjust_fdiv
_amsg_exit
_initterm
free
strchr
atoi
time
wcstoul
wcsncpy
_wcsicmp
swprintf
iswspace
memmove
wcscpy
iswdigit
wcslen
wcscmp
wcsspn
_except_handler3
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ