nqyfwwdl
Static task
static1
Behavioral task
behavioral1
Sample
2742ba349fd4270a338c17e6367ab744_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2742ba349fd4270a338c17e6367ab744_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2742ba349fd4270a338c17e6367ab744_JaffaCakes118
-
Size
50KB
-
MD5
2742ba349fd4270a338c17e6367ab744
-
SHA1
b47ed312b864cb548582a3d74d2589cb89302a7d
-
SHA256
af4e3f7210ad9f40beeb6abbd47aa2be377b2d43bf599fc1554bec41e33c8d53
-
SHA512
5bdf76b2e2ff1286c4af7952fd85fbf29189ca5c664c359550f7ba3f0fbb769c0ac920d5779e4b8830530043b3db79e02f1ef33b11387944df9efbc4a52ef6e2
-
SSDEEP
768:BxexOQLXs+kFdBII6SNzCFq1VGFnnEo2rW+StBvXt3Nwl96CvL2buPFDj0:BUxOogFEokdhnEo2ZStBVq93AuPFD4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2742ba349fd4270a338c17e6367ab744_JaffaCakes118
Files
-
2742ba349fd4270a338c17e6367ab744_JaffaCakes118.dll windows:4 windows x86 arch:x86
056473e53490259fa3771329b8466653
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlCanonicalizeA
kernel32
Beep
SetLastError
SetInformationJobObject
lstrcmpiA
FindNextChangeNotification
QueueUserAPC
GetLargestConsoleWindowSize
lstrcpynW
FindNextVolumeA
EnumSystemLocalesA
GetFileType
FreeResource
ReadProcessMemory
GetProcessPriorityBoost
GetCurrentProcess
SetEndOfFile
CreateHardLinkA
FreeLibraryAndExitThread
BuildCommDCBAndTimeoutsW
CreateMutexA
GetDiskFreeSpaceExA
DefineDosDeviceA
GetSystemDefaultLCID
MulDiv
GetStartupInfoW
SetComputerNameW
SetLocalTime
SetConsoleCursorInfo
GetFileAttributesExW
GetFileAttributesW
FindResourceW
ExitThread
GetTimeZoneInformation
RequestWakeupLatency
GetCommConfig
FileTimeToLocalFileTime
GetLogicalDrives
GlobalAddAtomA
FindResourceExA
Sleep
GetPrivateProfileStringW
HeapAlloc
GetProcessHeap
HeapFree
ConvertDefaultLocale
InterlockedDecrement
ole32
OleRun
user32
IsClipboardFormatAvailable
DialogBoxIndirectParamW
OpenIcon
GetMenuItemRect
CallWindowProcA
InvalidateRgn
GetPropA
KillTimer
SetTimer
GetWindowThreadProcessId
CharLowerBuffA
CreateIconIndirect
UnhookWinEvent
SetCursorPos
VkKeyScanExA
GetDlgItemTextW
HideCaret
DragObject
OemToCharBuffA
ToAscii
GetCursorInfo
DlgDirSelectComboBoxExA
EmptyClipboard
GetClassInfoExW
LoadImageW
ChangeDisplaySettingsA
FindWindowA
SetCapture
GetSysColor
CountClipboardFormats
SetPropA
CheckMenuRadioItem
GetListBoxInfo
GetKeyNameTextW
SendMessageTimeoutW
BeginDeferWindowPos
ReleaseDC
advapi32
RegLoadKeyA
msvcrt
malloc
memset
free
winmm
mixerOpen
Exports
Exports
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1B
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 798B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ