Static task
static1
Behavioral task
behavioral1
Sample
1964eb8d8ffbcabc08dc6f251010f0dd_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1964eb8d8ffbcabc08dc6f251010f0dd_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
1964eb8d8ffbcabc08dc6f251010f0dd_JaffaCakes118
-
Size
136KB
-
MD5
1964eb8d8ffbcabc08dc6f251010f0dd
-
SHA1
810779ea0e4f41ddf710f5737ecaa28534e2b2bb
-
SHA256
c319d3ddba6e6da2f201bdf0f8ac51160ef060de1533bf603d5bdf4a2c4f467e
-
SHA512
85f153472a0127c0f54b61e317923b8fcdd6921e38d193f83c0d1c9d3116ea506def90344a88e393034cd393ecfe1ec218da795485b6f9d3f2ab4bab0a736ffa
-
SSDEEP
1536:2R2dY3xfhMrrxT9Buj7yU/zPtbhIwQ404IyxuXOo9oSyc1/w/OZLxrEVozibYhff:7mTgTw/bPtbTQHOouN44m/EMibYh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1964eb8d8ffbcabc08dc6f251010f0dd_JaffaCakes118
Files
-
1964eb8d8ffbcabc08dc6f251010f0dd_JaffaCakes118.dll windows:4 windows x86 arch:x86
26baad1d19ca74473caf4c76dc36c283
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedExchange
GetCurrentThreadId
LoadLibraryW
GetModuleFileNameW
GetDriveTypeW
LoadLibraryA
GetFileAttributesW
LocalFree
FreeLibrary
FormatMessageW
GetProcessHeap
VirtualFree
VirtualAlloc
lstrlenW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
CloseHandle
ReadFile
WaitForSingleObject
CreateEventA
CreateIoCompletionPort
DuplicateHandle
LocalAlloc
SetEvent
GetQueuedCompletionStatus
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GlobalFree
SetEndOfFile
CreateFileW
WriteFile
WriteProfileStringW
Sleep
GetCommTimeouts
DefineDosDeviceW
GetProfileIntW
SetCommState
GetCommState
lstrcmpiW
QueryDosDeviceW
GlobalAlloc
lstrcmpW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
HeapAlloc
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetStringTypeW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
ExitProcess
GetVersion
RtlUnwind
InterlockedCompareExchange
TerminateProcess
OutputDebugStringA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
SetCommTimeouts
VirtualProtect
user32
SetForegroundWindow
TranslateMessage
DispatchMessageW
GetWindowTextLengthW
PostMessageW
CheckDlgButton
DialogBoxParamW
GetClipboardData
IsClipboardFormatAvailable
EnableMenuItem
GetFocus
GetSysColor
IsIconic
GetWindowRect
DestroyWindow
SetDlgItemTextW
SetWindowLongW
GetParent
EnableWindow
GetDlgItemTextW
LoadAcceleratorsW
GetMessageW
IsDialogMessageW
TranslateAcceleratorW
LoadIconW
BeginPaint
DrawIcon
GetSysColorBrush
FillRect
EndPaint
PostQuitMessage
SetFocus
EndDialog
wsprintfA
LoadStringW
LoadCursorW
SetCursor
ShowCursor
SendDlgItemMessageW
WinHelpW
MessageBoxW
GetActiveWindow
GetDlgItem
SendMessageW
BringWindowToTop
advapi32
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
gdi32
DeleteObject
SetBkColor
ole32
ReleaseStgMedium
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ