Static task
static1
Behavioral task
behavioral1
Sample
1b2b9bc7227f93f66cee6e14920911f1_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b2b9bc7227f93f66cee6e14920911f1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1b2b9bc7227f93f66cee6e14920911f1_JaffaCakes118
-
Size
114KB
-
MD5
1b2b9bc7227f93f66cee6e14920911f1
-
SHA1
2d25265ad8a8ceff4269605dc7a2f6881defdd34
-
SHA256
0c74551509f1daf646706f8c6d9f2529d9829f2c7015c346c2460512783c4e14
-
SHA512
688f389230b78e48ca34cad01572db61bd12532d753a1f9959f56ec3d7c668755898d981c9b1a8dac03e81984c8728d43d67659c76805878033dec3603e1daff
-
SSDEEP
3072:XLvP5siGFlZW1A5BxDwrfxFHtnymZTsxfar:XTnGDZW1A57cVZtnyr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b2b9bc7227f93f66cee6e14920911f1_JaffaCakes118
Files
-
1b2b9bc7227f93f66cee6e14920911f1_JaffaCakes118.dll windows:4 windows x86 arch:x86
cdb84b58a51cb869fa5b657a7a9eac88
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
dbghelp
SymRegisterFunctionEntryCallback
SymCleanup
ole32
CoCreateInstance
CoUninitialize
advapi32
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
RegDeleteValueW
kernel32
WideCharToMultiByte
lstrcmpiW
lstrcpyW
lstrlenW
GetVersionExA
VirtualProtect
CreateDirectoryExA
DeleteTimerQueueTimer
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsA
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
VirtualFree
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedExchange
LCMapStringA
LCMapStringW
QueryPerformanceCounter
SetThreadIdealProcessor
TerminateProcess
UnhandledExceptionFilter
user32
GetWindowLongW
GetWindowRect
LoadStringW
ReleaseDC
GetSystemMetrics
CloseDesktop
EnableWindow
EndDialog
GetDesktopWindow
GetDlgItem
GetSysColor
Sections
.text Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ