Static task
static1
Behavioral task
behavioral1
Sample
2d1fe5046c643aec152e421f10326d70_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d1fe5046c643aec152e421f10326d70_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2d1fe5046c643aec152e421f10326d70_JaffaCakes118
-
Size
95KB
-
MD5
2d1fe5046c643aec152e421f10326d70
-
SHA1
b53726388aa59e60483d5dd3333bd57441724c39
-
SHA256
0e4da9cbff6f1b82ec6fd717c80097d048cca688e56100c8fc4625ab33facf09
-
SHA512
11cf0b82619969813213a4b6cd2ac503b8267795e31aaa8ce637ed0fdad61d559939fc54a592771b86ad7882e3826918b8f3329acfbf3bcf3cb2ca88e7e229f9
-
SSDEEP
1536:bVLrmZNdTUj1Nai1fVYeJyqWmJcKtxlGfYizIynNQGkHe3FEn0NJNLh:0lUmsfV/QKtxlEYKhN3kH0FE0NJNLh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d1fe5046c643aec152e421f10326d70_JaffaCakes118
Files
-
2d1fe5046c643aec152e421f10326d70_JaffaCakes118.dll windows:4 windows x86 arch:x86
a8fa47b2f943f601c8bacdc0597e3764
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
QueryPerformanceCounter
GetModuleHandleA
GetCurrentDirectoryW
GetSystemDirectoryW
GetModuleFileNameW
LoadLibraryW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
GetTickCount
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
VirtualQuery
InterlockedExchange
GetVersionExA
RtlUnwind
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetSystemInfo
GetCurrentProcess
SetUnhandledExceptionFilter
LocalFree
GetProcAddress
LocalAlloc
lstrlenW
lstrcmpW
lstrcmpiW
CompareStringW
GetModuleHandleW
lstrcpynW
ExpandEnvironmentStringsW
GetCommandLineA
VirtualProtect
user32
KillTimer
SetTimer
ShowWindow
SetWindowLongW
GetDlgItem
GetParent
DestroyIcon
GetSysColorBrush
SendDlgItemMessageW
SendMessageW
WinHelpW
GetWindowLongW
LoadStringW
LoadIconW
GetSystemMetrics
CopyRect
GetWindowRect
CheckDlgButton
EndDialog
EnableWindow
SetDoubleClickTime
SwapMouseButton
MapWindowPoints
PtInRect
GetDC
SetDlgItemInt
DestroyCursor
InvalidateRect
GetSysColor
LoadImageW
LoadCursorW
IsDlgButtonChecked
ReleaseDC
ShowCursor
SetCursor
DrawFocusRect
CheckRadioButton
GetDlgItemInt
RegisterWindowMessageW
DialogBoxParamW
MessageBeep
CharNextW
MessageBoxW
GetFocus
DrawIcon
InflateRect
SystemParametersInfoW
advapi32
RegEnumValueW
RegQueryValueW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
gdi32
SelectObject
GetDeviceCaps
SetLayout
GetLayout
ExtTextOutW
SetBkColor
SetTextColor
GetTextMetricsW
DeleteDC
DeleteObject
rpcrt4
I_RpcMapWin32Status
RpcServerRegisterIf2
RpcServerUseProtseqEpW
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ