__ShowScrollBar@12
Static task
static1
Behavioral task
behavioral1
Sample
1b22f72c759897006ba78838bae8e7f9_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b22f72c759897006ba78838bae8e7f9_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1b22f72c759897006ba78838bae8e7f9_JaffaCakes118
-
Size
145KB
-
MD5
1b22f72c759897006ba78838bae8e7f9
-
SHA1
02ef827d2fe04dcca2b05494ca14eb7bbba794ca
-
SHA256
239be9658963b66d5b63a0349be90a67aca572c69107bfd208fcf613b04262b6
-
SHA512
f7e2cbbf794d4b168b22519b81d9381b87c4dbb80676ac3e79b34413021a4611acb7bc3d6f2e21d4286f786c351f29a245815a4ba663bb42ebd635b5bd00aee9
-
SSDEEP
3072:6xaKFna8CUvhVtcDRoqwCgE6LsfaKBCBIGlm6axrP:4RXCUvhVqD/wM6LsCmQmHr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b22f72c759897006ba78838bae8e7f9_JaffaCakes118
Files
-
1b22f72c759897006ba78838bae8e7f9_JaffaCakes118.dll windows:5 windows x86 arch:x86
fc6a07926d2c2c4219a52d9fa8ebcc25
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntdll
wcsncmp
strcpy
_vsnprintf
shlwapi
PathCanonicalizeA
StrFormatByteSizeW
PathStripToRootA
StrFormatKBSizeW
shell32
ord750
kernel32
SetVolumeLabelA
SetupComm
TlsGetValue
GetProfileIntW
SetCommBreak
SetFileTime
SetHandleCount
FatalAppExitW
FileTimeToDosDateTime
CancelIo
QueueUserWorkItem
CancelTimerQueueTimer
RequestDeviceWakeup
OpenEventW
lstrcpyA
GetDiskFreeSpaceExW
SetProcessWorkingSetSize
lstrlenW
LoadLibraryW
OpenFileMappingW
lstrcmpiA
ConnectNamedPipe
SetMailslotInfo
CreateEventW
user32
GetRawInputData
LoadMenuIndirectA
RealGetWindowClassW
DestroyAcceleratorTable
InvertRect
EnumPropsW
GetWindow
LookupIconIdFromDirectory
GetDlgItemTextA
DlgDirListW
GetSystemMetrics
ReleaseCapture
DeregisterShellHookWindow
TileWindows
IntersectRect
LockWindowUpdate
GetDC
DialogBoxIndirectParamW
LoadImageW
VkKeyScanExW
SetCursor
IsCharUpperA
TabbedTextOutW
GetClientRect
CreateAcceleratorTableW
ExitWindowsEx
TranslateMessage
PeekMessageW
GetListBoxInfo
GetMenuContextHelpId
ShowScrollBar
PostThreadMessageW
MessageBoxW
MapWindowPoints
ExcludeUpdateRgn
DispatchMessageW
GetClassNameA
DrawTextExA
EnumPropsA
gdi32
ResetDCW
SetMapMode
SetAbortProc
DeleteEnhMetaFile
GetBrushOrgEx
ScaleWindowExtEx
CreateBitmapIndirect
GetTextExtentPointI
GetTextExtentPointW
GetMetaRgn
GetOutlineTextMetricsA
SetMetaFileBitsEx
AnimatePalette
GetBitmapBits
TextOutW
advapi32
AddAce
CopySid
AddAuditAccessAceEx
IsValidAcl
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.extext Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmem Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedat Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ