Static task
static1
Behavioral task
behavioral1
Sample
2ffb42dc862cfbd09134a13aa821f40d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ffb42dc862cfbd09134a13aa821f40d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2ffb42dc862cfbd09134a13aa821f40d_JaffaCakes118
-
Size
100KB
-
MD5
2ffb42dc862cfbd09134a13aa821f40d
-
SHA1
9fe70f259e059b72170f0119fe1d23b072fe502c
-
SHA256
03e925a78ee921a07d15c393cd4cc83896815508dcf92d4aecb8f114389e634a
-
SHA512
32771b5c235e87400b4dee9e3e970749eb88481100d18ca868d8de1950db33111ccd937cb23261a49ecf3ad26f6e37cf970a28165683c68bba82a6af09082120
-
SSDEEP
3072:XqBKvCBmroK+A48+VLxxltYTeKNsRRlaYXXqkVBp:XqEvCBk8A4/mTJk8YXXRT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ffb42dc862cfbd09134a13aa821f40d_JaffaCakes118
Files
-
2ffb42dc862cfbd09134a13aa821f40d_JaffaCakes118.dll windows:4 windows x86 arch:x86
699db164ef5f973d5945b889ad8afba0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
netapi32
Netbios
NetScheduleJobAdd
NetReplGetInfo
DsRoleCancel
advapi32
ElfReportEventA
GetExplicitEntriesFromAclW
LsaICLookupSids
ElfDeregisterEventSource
ObjectPrivilegeAuditAlarmA
QueryServiceLockStatusA
AllocateAndInitializeSid
ConvertSecurityDescriptorToStringSecurityDescriptorA
RemoveTraceCallback
user32
GetPropA
GetSubMenu
GetSysColorBrush
LoadImageA
MsgWaitForMultipleObjects
SendMessageTimeoutA
SetClipboardData
EnableMenuItem
shlwapi
PathQuoteSpacesA
PathParseIconLocationW
PathMakePrettyW
PathIsPrefixA
PathIsFileSpecA
PathGetArgsA
PathFindSuffixArrayW
PathCanonicalizeW
AssocQueryKeyW
oleaut32
VarBstrCat
SafeArrayCreate
RevokeActiveObject
ClearCustData
OleLoadPicturePath
RegisterTypeLi
kernel32
GetVersionExA
CreateFileA
ExitProcess
FileTimeToSystemTime
GetBinaryTypeA
WriteFile
WaitForSingleObjectEx
VirtualQueryEx
MoveFileWithProgressA
LocalFlags
LocalFileTimeToFileTime
IsBadHugeReadPtr
HeapCreate
HeapAlloc
CloseHandle
GetSystemWindowsDirectoryW
GetStartupInfoA
GetProfileIntW
GetProcessShutdownParameters
GetModuleHandleA
GetLogicalDriveStringsA
GetFullPathNameW
GetCompressedFileSizeW
GetCommandLineA
dbghelp
ImageRvaToSection
SymEnumTypes
SymGetSymFromAddr
SymSetOptions
SymUnDName
SymGetLineFromName
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ