Static task
static1
Behavioral task
behavioral1
Sample
2a72680e7f957c2f8a93e0735f4e57fc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a72680e7f957c2f8a93e0735f4e57fc_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2a72680e7f957c2f8a93e0735f4e57fc_JaffaCakes118
-
Size
268KB
-
MD5
2a72680e7f957c2f8a93e0735f4e57fc
-
SHA1
2f1ae95e9e8b96d714c5031f73c006988c749683
-
SHA256
0572624259145ae57f5860f88f345f99c441b327478aef9bb4332c4701466cff
-
SHA512
85fb7dd6bd64a080b51c0bfec626372d7da3cd81a9c6e79f645be0de530bb869a3afedd6df4604105e21270537c1919ce4ec65443a39d8758ed264ecef6441a3
-
SSDEEP
6144:GcW4I8upYtBkpbZ+REUraC6ShGOmKpEMEA+G:GUI9WBS+DrflGOmUh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a72680e7f957c2f8a93e0735f4e57fc_JaffaCakes118
Files
-
2a72680e7f957c2f8a93e0735f4e57fc_JaffaCakes118.dll windows:4 windows x86 arch:x86
c8e74a361b67e0efbb5444454d69c263
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
user32
SetCapture
comctl32
ImageList_Create
ImageList_GetBkColor
ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Destroy
ImageList_Draw
ImageList_Add
advapi32
RegCreateKeyExA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
shlwapi
PathIsDirectoryA
PathIsContentTypeA
SHQueryValueExA
SHEnumValueA
SHSetValueA
SHDeleteValueA
SHGetValueA
SHStrDupA
SHQueryInfoKeyA
gdi32
RestoreDC
SelectPalette
BitBlt
GetPixel
GetDCOrgEx
GetDIBColorTable
kernel32
VirtualAlloc
GetModuleHandleW
ExitProcess
LoadLibraryExA
SetErrorMode
SetFilePointer
ExitThread
GetLastError
ResetEvent
GetProcAddress
ReadFile
SetEndOfFile
GetModuleHandleA
GetOEMCP
SetEvent
IsBadReadPtr
GetACP
SetHandleCount
shell32
SHGetFileInfoA
SHGetDiskFreeSpaceA
SHFileOperationA
DragQueryFileA
SHGetSpecialFolderLocation
Sections
CODE Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 875B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 4KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ