Static task
static1
Behavioral task
behavioral1
Sample
2e6c41a93ca65b6a3c2036a53c6636b2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e6c41a93ca65b6a3c2036a53c6636b2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2e6c41a93ca65b6a3c2036a53c6636b2_JaffaCakes118
-
Size
272KB
-
MD5
2e6c41a93ca65b6a3c2036a53c6636b2
-
SHA1
4207ee2f831214b350afe3ca40b8797959b12fdb
-
SHA256
f41254b9ab1f0a2f9a1852df72d33c9a8c2f26582330cb88d220f9191fc13bc4
-
SHA512
b1a507444663bfd5181be683dba3f59e3cf5a1050d4684bbd3b8772711b9d2a1407846e3aa67020e7dee7da201404a06fdde7348d01e936a5e437f7ec0cf6389
-
SSDEEP
3072:pMN9CyolnT+wLlAa+KEbr26YSK5ePYiN3vg/OnfReHy2us+rLbStVFxWJ67jxyLp:G9Vs+wLYQkYitHkypsMANyL77
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e6c41a93ca65b6a3c2036a53c6636b2_JaffaCakes118
Files
-
2e6c41a93ca65b6a3c2036a53c6636b2_JaffaCakes118.dll windows:4 windows x86 arch:x86
a9d6f4fd5788f1651ff67fb6fb85dd86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shell32
SHFileOperationA
SHGetSpecialFolderLocation
DragQueryFileA
SHGetDiskFreeSpaceA
kernel32
GetModuleHandleW
IsBadReadPtr
GetProcAddress
ExitThread
GetACP
lstrlenA
ExitProcess
GetLastError
lstrlenW
GlobalAlloc
GetModuleHandleA
LoadLibraryExA
VirtualAlloc
GetOEMCP
version
VerFindFileA
VerInstallFileA
user32
AdjustWindowRectEx
ReleaseCapture
LoadIconA
CharNextW
PostQuitMessage
UnhookWindowsHookEx
GetKeyboardState
GetKeyboardLayoutNameA
EnableScrollBar
CharNextA
SetRect
SetWindowsHookExA
SetWindowPos
SendMessageW
MessageBoxA
WindowFromPoint
GetCursorPos
WaitMessage
GetClientRect
MsgWaitForMultipleObjects
GetParent
GetKeyboardLayoutList
SetTimer
DestroyIcon
SetCursor
GetPropA
TranslateMessage
GetKeyboardType
DefFrameProcA
CharToOemA
EndPaint
GetSysColorBrush
ReleaseDC
GetWindowLongA
GetMenuItemCount
ShowWindow
ClientToScreen
ShowOwnedPopups
GetClipboardData
IsWindowUnicode
DrawEdge
SetWindowTextA
ScrollWindow
GetSubMenu
DispatchMessageW
GetCapture
GetWindowDC
DestroyWindow
GetMenuState
InsertMenuItemA
IsWindowVisible
SetScrollInfo
GetMenuItemInfoA
RegisterClipboardFormatA
SystemParametersInfoA
GetMessagePos
GetMenuStringA
PostMessageA
EmptyClipboard
GetTopWindow
GetScrollPos
GetClassInfoA
GetForegroundWindow
GetWindowTextA
GetClassLongA
DefWindowProcA
GetWindowRect
GetDesktopWindow
DeleteMenu
GetDC
LoadBitmapA
SendMessageA
GetScrollRange
IsIconic
GetSysColor
GetFocus
GetMenuItemID
TranslateMDISysAccel
MapWindowPoints
GetDlgItem
GetLastActivePopup
ShowScrollBar
GetKeyNameTextA
RemoveMenu
GetScrollInfo
CreateIcon
GetWindowLongW
EnableMenuItem
GetWindow
SetClassLongA
GetDCEx
SetPropA
InsertMenuA
ScreenToClient
SetScrollPos
GetKeyboardLayout
PtInRect
EnumWindows
DrawTextA
DestroyMenu
EqualRect
SetMenuItemInfoA
ActivateKeyboardLayout
SetWindowPlacement
GetIconInfo
LoadKeyboardLayoutA
GetKeyState
ChildWindowFromPoint
DrawMenuBar
GetSystemMenu
IntersectRect
DrawIconEx
CheckMenuItem
SetMenu
LoadStringA
GetMenu
Sections
CODE Size: 224KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 4KB - Virtual size: 565B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ