Static task
static1
Behavioral task
behavioral1
Sample
25e67aedda61e6805174ff993e9bb28e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
25e67aedda61e6805174ff993e9bb28e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
25e67aedda61e6805174ff993e9bb28e_JaffaCakes118
-
Size
136KB
-
MD5
25e67aedda61e6805174ff993e9bb28e
-
SHA1
3a9b9618ef6d475a08da0312e8b701b85fff11fc
-
SHA256
6158c4b8a2209729ffbb0c19a0153b56422b70f3a6534e09c947483ff033689e
-
SHA512
39a0bdf199ecbc04c1f34fc3e1cfcef7e9c888a5d294c49bb402e9ed25df606c3769b4852365547537c2d2cad675bce7203390b48ef66e9d3b44154a2108618b
-
SSDEEP
1536:7oMRn26sAUzMK+U/7G5x4kHabAKAY3iQr/8XR89qViBDQhJoWQX3wk7:0MN26sAARv7Qx4nEZY3jrsWwGQHoZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e67aedda61e6805174ff993e9bb28e_JaffaCakes118
Files
-
25e67aedda61e6805174ff993e9bb28e_JaffaCakes118.dll windows:4 windows x86 arch:x86
e3d1ae8c13f020dc3c3bc5a4b1a9364b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegDeleteKeyW
RegLoadKeyW
RegCreateKeyExA
RegEnumValueW
RegOpenKeyExW
RegOpenKeyA
RegReplaceKeyW
RegQueryValueW
RegQueryValueA
RegEnumKeyExA
RegEnumKeyExW
RegGetKeySecurity
RegEnumKeyW
RegEnumKeyA
RegFlushKey
RegCreateKeyExW
RegEnumValueA
RegEnumKeyW
RegOpenKeyExW
RegQueryInfoKeyA
RegDeleteValueA
RegEnumValueW
RegLoadKeyW
RegEnumKeyExW
RegQueryValueExW
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
RegReplaceKeyW
RegOpenKeyExA
RegFlushKey
RegCreateKeyW
RegQueryValueA
comctl32
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Remove
ImageList_LoadImageA
ImageList_LoadImage
ImageList_GetDragImage
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_LoadImageW
ImageList_DragShowNolock
ImageList_Destroy
ImageList_DrawIndirect
ImageList_AddMasked
ImageList_Read
ImageList_LoadImageW
ImageList_Destroy
ImageList_Remove
ImageList_EndDrag
ImageList_AddIcon
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_DragLeave
ImageList_Merge
ImageList_GetImageCount
ImageList_Create
ImageList_Copy
ImageList_DragShowNolock
user32
DrawTextW
AppendMenuA
DialogBoxParamA
GetFocus
DrawIcon
IsMenu
GetDlgItem
BlockInput
AppendMenuW
LoadCursorA
DrawIconEx
GetMenu
gdi32
GetPixel
CancelDC
GetPixel
RestoreDC
CreateSolidBrush
GetBitmapBits
GetCurrentPositionEx
GetDCOrgEx
CloseFigure
AddFontResourceA
AddFontMemResourceEx
AbortPath
DeleteDC
AddFontResourceExW
ClearBitmapAttributes
GetPixel
CloseFigure
AddFontResourceTracking
ExtTextOutA
AbortPath
CopyMetaFileA
SetTextColor
GetPixel
GetClipBox
BitBlt
CloseFigure
GetClipBox
GetBitmapBits
ClearBitmapAttributes
AddFontMemResourceEx
GetPixel
BitBlt
GetPixel
SetTextColor
AddFontResourceExA
ExtTextOutA
AbortPath
CloseMetaFile
GetCurrentPositionEx
ExcludeClipRect
BeginPath
GetDCOrgEx
ClearBitmapAttributes
DeleteObject
GetPixel
CloseFigure
CopyMetaFileA
CancelDC
ExtTextOutA
GetBitmapBits
ClearBrushAttributes
AddFontMemResourceEx
GetBrushOrgEx
DeleteDC
DeleteObject
GetBitmapBits
AddFontResourceExW
CreateSolidBrush
GetPixel
AddFontResourceA
GetClipBox
AddFontResourceTracking
AbortPath
CancelDC
kernel32
SetLastError
CreateProcessA
GetCommandLineA
OpenFileMappingA
ReadFile
CreateThread
CreateDirectoryA
DeleteAtom
GetLastError
GetFileSize
DeleteFileA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 313B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ