DoInstall
Static task
static1
Behavioral task
behavioral1
Sample
286f5f88ad8145a076b4d56afad4641e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
286f5f88ad8145a076b4d56afad4641e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
286f5f88ad8145a076b4d56afad4641e_JaffaCakes118
-
Size
264KB
-
MD5
286f5f88ad8145a076b4d56afad4641e
-
SHA1
46f87c080dc8fa981d2e67637dd0c9373822a48f
-
SHA256
c6e5f99fa11b62132530eefbfd5a899d201efd0eb1cc3ce5e974dc7108006e86
-
SHA512
f4cf1e888676fc2a90518cc5e2cc8d1c73d8c0669f8da45affdaf292892e772406c941dafbfdb0c758ede85a9eb2dd7d1a6559316029858b238d8c805a409e86
-
SSDEEP
3072:eGjgTD/l0DewPzi+8wb+p0xHJf90SwK+dXBcOpdyjyHJtlaU3sXU5OH+Uz:exDd0DbWWzf9dwFdR/AyoasXU5FUz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 286f5f88ad8145a076b4d56afad4641e_JaffaCakes118
Files
-
286f5f88ad8145a076b4d56afad4641e_JaffaCakes118.dll windows:4 windows x86 arch:x86
e391150ba360727d220578e274f1f6eb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalLock
GetCurrentProcess
GlobalUnlock
GetModuleHandleA
MultiByteToWideChar
CreateProcessA
GlobalFree
GlobalAlloc
HeapFree
GetCurrentThread
WaitForSingleObject
CreateMutexA
OpenMutexA
GetPrivateProfileStringA
SearchPathA
HeapAlloc
CopyFileA
LoadLibraryA
GetModuleFileNameA
SetFileTime
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetDiskFreeSpaceA
ExpandEnvironmentStringsA
LoadLibraryExA
EnumResourceNamesA
FreeLibrary
WritePrivateProfileStringA
WriteFile
ReadFile
GetShortPathNameA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
SetEvent
SetFileAttributesA
CreateFileA
LoadResource
GetFileSize
CloseHandle
CreateDirectoryA
lstrcatA
RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
SetLastError
DeleteFileA
GetLastError
GetFileAttributesA
lstrcpynA
GetVersionExA
LocalFree
GetStringTypeExA
WideCharToMultiByte
OutputDebugStringA
InterlockedDecrement
InterlockedIncrement
GetThreadLocale
CompareStringA
lstrcmpiA
lstrcmpA
lstrlenA
lstrcpyA
Sleep
GetTickCount
GetExitCodeProcess
OpenEventA
RaiseException
VirtualFree
GetEnvironmentVariableA
LockResource
FreeResource
HeapDestroy
HeapCreate
OpenSemaphoreA
CreateFileMappingA
GetSystemDirectoryA
LCMapStringA
FindResourceA
RtlUnwind
GetCommandLineA
GetVersion
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetFilePointer
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
UnmapViewOfFile
VirtualAlloc
GetStringTypeA
MapViewOfFile
GetStringTypeW
LCMapStringW
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
SetEndOfFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
ReleaseSemaphore
GetVolumeInformationA
CompareStringW
SetEnvironmentVariableA
OpenProcess
GetCurrentProcessId
GetFullPathNameA
user32
GetActiveWindow
GetLastActivePopup
CharNextA
RegisterWindowMessageA
FindWindowA
SendMessageTimeoutA
GetParent
SendMessageA
RemovePropA
GetPropA
SetForegroundWindow
SystemParametersInfoA
MessageBoxA
DialogBoxParamA
EnableWindow
SetWindowPos
SetRect
GetSystemMetrics
GetWindowRect
GetWindowLongA
SetWindowLongA
MessageBeep
SetPropA
EndPaint
DrawIcon
BeginPaint
InflateRect
FillRect
EndDialog
GetDlgCtrlID
GetFocus
ReleaseDC
InvalidateRect
GetDC
IsWindowEnabled
GetWindowTextA
LoadIconA
ScreenToClient
GetDlgItem
SetWindowTextA
SetFocus
EnumChildWindows
DestroyWindow
DispatchMessageA
GetDesktopWindow
PostMessageA
GetClassNameA
EnumWindows
WaitForInputIdle
PeekMessageA
TranslateMessage
CharLowerA
LoadStringA
CharUpperA
wsprintfA
IsWindow
advapi32
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
AllocateAndInitializeSid
ImpersonateSelf
OpenThreadToken
AccessCheck
AreAllAccessesGranted
RevertToSelf
AddAccessAllowedAce
GetAclInformation
GetAce
GetLengthSid
InitializeAcl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ole32
CoInitialize
CoCreateInstance
CoUninitialize
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
gdi32
CreateCompatibleBitmap
DeleteObject
CreateSolidBrush
SetBkMode
SetBkColor
RealizePalette
SelectPalette
Polyline
SelectObject
CreatePen
GetObjectA
GetTextExtentPoint32A
CreatePalette
CreateDIBitmap
DeleteDC
BitBlt
GetDeviceCaps
CreateCompatibleDC
SetTextColor
CreateBitmap
setupapi
SetupIterateCabinetA
Exports
Exports
Sections
.text Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ