Static task
static1
Behavioral task
behavioral1
Sample
217a17c78a05fe3da65d7e389185f62c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
217a17c78a05fe3da65d7e389185f62c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
217a17c78a05fe3da65d7e389185f62c_JaffaCakes118
-
Size
66KB
-
MD5
217a17c78a05fe3da65d7e389185f62c
-
SHA1
cba289b555a4e3f6bc82e5dc3cdf82b27c4b18d3
-
SHA256
a7644631b45ef2b25574b35b595ca5df58eb3dc69c005296cc506344359a8160
-
SHA512
6ed7900993c4aa31c3f6a3c953acf1def43e5cdc35489be9bb60c48580abda52216473fa89ab889687a3a8003ea98c9ac1fd100be53b1dfb7c71b954b66dbc49
-
SSDEEP
1536:tP3ivFAvLrlObRDaTb0bWPsGkOdLuxY1x1z7ug55q59:Ri2zgbRuWWPsGkOdSYz4/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 217a17c78a05fe3da65d7e389185f62c_JaffaCakes118
Files
-
217a17c78a05fe3da65d7e389185f62c_JaffaCakes118.dll windows:4 windows x86 arch:x86
feff0c954438f0b0beaa74035b2b0fd8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
dinput
DirectInputCreateW
DirectInputCreateEx
kernel32
LeaveCriticalSection
lstrlenA
lstrcpyA
CloseHandle
CompareStringA
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceNamesA
ExitProcess
GetCommandLineA
GetVersion
lstrcmpA
LoadResource
ReadFile
RtlUnwind
ole32
CreateFileMoniker
OleFlushClipboard
OleInitialize
CreateBindCtx
OleUninitialize
CoUninitialize
CoInitialize
CoTaskMemAlloc
OleLockRunning
CoCreateInstance
CoDisconnectObject
CoGetClassObject
CoRevokeClassObject
dsound
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCaptureCreate
user32
LoadImageA
OemToCharBuffA
GetMessageA
ToAscii
GetFocus
GetCursor
EndPaint
CreateIconFromResource
EnableWindow
DrawTextA
DrawIcon
ShowWindow
DestroyCaret
CreateDialogIndirectParamA
CreateDesktopW
CreateDesktopA
EndDialog
shell32
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetFileInfoA
SHGetDesktopFolder
SHFileOperationA
SHBindToParent
ShellExecuteW
msvfw32
ICGetInfo
ICInstall
ICCompress
Sections
.text Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE