Static task
static1
Behavioral task
behavioral1
Sample
31c27058107691c8827ccd45c883980e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31c27058107691c8827ccd45c883980e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
31c27058107691c8827ccd45c883980e_JaffaCakes118
-
Size
160KB
-
MD5
31c27058107691c8827ccd45c883980e
-
SHA1
d65b3fde74b89c74316834ed0b78c32b1180077d
-
SHA256
e7b9ef3bcc50f919352c0cbe5dd0111a4f14bdbc2779a30f73e66f32c1a8b233
-
SHA512
c95b092b457dfae7d23c5f5d34cfbd92dbfdaa251ebbcc3376c92c3da40e84a86ebd3e2bd9ae815950adf8cc325234d73a9bd856d8c970e0868116336ad17829
-
SSDEEP
3072:nDOsnQ8C+SgZAeX32wp937AmxTOC7NocK3d/VC9zoQL8vL+ug6VGl5t:q/gudQ0n4+cK3d/MXujgAy5t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31c27058107691c8827ccd45c883980e_JaffaCakes118
Files
-
31c27058107691c8827ccd45c883980e_JaffaCakes118.dll windows:4 windows x86 arch:x86
415163c64eeaf3e1d310b6e7dde21455
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetUserDefaultLCID
MulDiv
InterlockedExchangeAdd
GetComputerNameA
VirtualProtect
GetTickCount
InterlockedIncrement
LoadLibraryA
IsDBCSLeadByte
Sleep
GetSystemTimeAsFileTime
GetLastError
IsBadReadPtr
GetCurrentProcess
VirtualAlloc
user32
GetWindowInfo
GetLastActivePopup
GetWindow
GetCursor
IsWindowUnicode
GetClientRect
IsCharUpperA
GetWindowRgn
GetWindowThreadProcessId
IsWindowVisible
GetGUIThreadInfo
GetParent
IsMenu
InSendMessage
GetForegroundWindow
IsClipboardFormatAvailable
GetTitleBarInfo
advapi32
IsValidSecurityDescriptor
InitializeSecurityDescriptor
msvcrt
_itoa
srand
rand
_adjust_fdiv
malloc
_initterm
free
memchr
_swab
time
floor
modf
_pctype
_isctype
__mb_cur_max
__doserrno
_CIcosh
_CIasin
_CIfmod
_CItanh
div
_ltoa
_ultoa
gdi32
GetPixel
GdiFlush
GdiGetBatchLimit
GetBitmapDimensionEx
GetStretchBltMode
ole32
CoDosDateTimeToFileTime
shell32
ord680
ord66
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ