?QQStart@@YGXK@Z
Static task
static1
Behavioral task
behavioral1
Sample
31c9738f95ce653c12ca06b0ec0d6add_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31c9738f95ce653c12ca06b0ec0d6add_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
31c9738f95ce653c12ca06b0ec0d6add_JaffaCakes118
-
Size
66KB
-
MD5
31c9738f95ce653c12ca06b0ec0d6add
-
SHA1
5859dd3eb01aaf2c47c413c9e79c6aa5bb458e12
-
SHA256
1c57f6a8227f1137c68d2ab9251a4bd532fab1bb34ea499e618b81fb1d30b8a1
-
SHA512
f2d6d79e6285c17c6d48ca12be8b042d394a928686abe7b1f5c3d626e91cdba5ee18d7fc740f33a6581f87222e238f7c5b906d1807cc74479fb89fa5824dc9a1
-
SSDEEP
1536:EvoVLEKU+RN3Z2CAzHTHw02Y8rkaVINMwmpk:tBnjIzH2lrnINM5y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31c9738f95ce653c12ca06b0ec0d6add_JaffaCakes118
Files
-
31c9738f95ce653c12ca06b0ec0d6add_JaffaCakes118.dll windows:4 windows x86 arch:x86
02401518d107128bbe4f985673634a06
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
winmm
sndPlaySoundA
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
kernel32
lstrcpynA
GetModuleHandleA
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
OpenProcess
CreateThread
GetLastError
GetModuleFileNameA
GetProcAddress
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
GetPrivateProfileStringA
GetTickCount
GetVersionExA
WriteFile
CreateFileA
SetFilePointer
GetLocalTime
ReadFile
GetPrivateProfileIntA
LocalFree
FindResourceA
LoadResource
SizeofResource
GlobalLock
GlobalUnlock
MultiByteToWideChar
Sleep
DeleteFileA
ExitProcess
GlobalAlloc
GlobalFree
CreateDirectoryA
LocalAlloc
CreateMutexA
user32
LoadIconA
GetWindowTextA
FindWindowExA
FindWindowA
GetWindowThreadProcessId
SendMessageA
CharLowerA
SetWindowLongA
GetWindowLongA
CreateDialogParamA
IsWindow
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
RegisterClassExA
UpdateWindow
CreateWindowExA
PostQuitMessage
DestroyIcon
SetWindowPos
SetWindowRgn
GetCursorPos
GetDC
GetClassLongA
FillRect
ReleaseDC
MoveWindow
SetTimer
DefWindowProcA
ShowWindow
PtInRect
LoadCursorA
SetCursor
KillTimer
GetWindowDC
wsprintfA
GetWindowRect
GetSystemMetrics
gdi32
SelectObject
BitBlt
GetObjectA
CreateCompatibleDC
CreatePolygonRgn
TextOutA
SetTextColor
CreateFontA
SetPixel
SetBkMode
GetTextExtentPoint32A
GetStockObject
LineTo
MoveToEx
CreatePen
Rectangle
CreateSolidBrush
CreateCompatibleBitmap
StretchBlt
DeleteObject
advapi32
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCloseKey
shell32
ShellExecuteA
Shell_NotifyIconA
ole32
CreateStreamOnHGlobal
gdiplus
GdiplusShutdown
GdipLoadImageFromStream
GdipCreateBitmapFromFile
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdipDisposeImage
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ