Static task
static1
Behavioral task
behavioral1
Sample
1aa8223caa3850e41ba8336b977d300d_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1aa8223caa3850e41ba8336b977d300d_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
1aa8223caa3850e41ba8336b977d300d_JaffaCakes118
-
Size
164KB
-
MD5
1aa8223caa3850e41ba8336b977d300d
-
SHA1
78f1662eac87ac5e16cbe2aff27d3c97d816d05b
-
SHA256
a83b4500a30b014c73950da0fb45bcb188e4f0029a22e00d409a1b2586ff811c
-
SHA512
4652b862b685b121073c5c532a49026293650d70f00f7f8f830fba420c2692773e78c84a4aec2376d58915db60d4a37dd5756a549fe448e39b21456bb6f03bf2
-
SSDEEP
3072:gvmLKFwDaO6dC/++OxLOWe7Ih/i9XYnYZYs20Jaw1nQ5npOD:isaO+C/+++LvoFYYZCYaAa0D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aa8223caa3850e41ba8336b977d300d_JaffaCakes118
Files
-
1aa8223caa3850e41ba8336b977d300d_JaffaCakes118.dll windows:4 windows x86 arch:x86
66545383c66f7b5ee5c6948cd826c2f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
GetProcAddress
GetUserDefaultLCID
GetSystemTimeAsFileTime
IsDBCSLeadByte
VirtualAlloc
VirtualProtect
VirtualQuery
DosDateTimeToFileTime
GetTickCount
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
GetComputerNameA
GetCurrentProcess
GetProcessHeap
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
GetLocalTime
user32
GetClientRect
GetWindowTextLengthA
GetWindowTextA
IsCharAlphaNumericA
GetWindowDC
IsClipboardFormatAvailable
GetDlgItem
GetAncestor
GetTitleBarInfo
GetWindow
IsZoomed
GetWindowPlacement
GetDesktopWindow
BlockInput
SetLastErrorEx
GetCursor
advapi32
RevertToSelf
GetUserNameA
AreAnyAccessesGranted
InitializeSecurityDescriptor
IsValidSecurityDescriptor
msvcrt
malloc
_initterm
free
_swab
_memccpy
_ltoa
srand
_adjust_fdiv
_CIacos
_set_error_mode
time
_hypot
_pctype
_isctype
__mb_cur_max
floor
_errno
__doserrno
div
gdi32
GetBitmapDimensionEx
GetBkColor
GdiGetBatchLimit
ole32
CoGetCurrentProcess
CoRevertToSelf
shell32
DuplicateIcon
ord524
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ