Static task
static1
Behavioral task
behavioral1
Sample
35d74e8867c405f6baec2bb15f048fa7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35d74e8867c405f6baec2bb15f048fa7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
35d74e8867c405f6baec2bb15f048fa7_JaffaCakes118
-
Size
59KB
-
MD5
35d74e8867c405f6baec2bb15f048fa7
-
SHA1
eafc85f941aa70e5044a9ec30880342f50f0516b
-
SHA256
947fae865c89553beff1180e13b96cefa26dfae933d2e7eb1f7e3a8f0f97d711
-
SHA512
1c0031a5eb46abc0fe286713251d7949a14ddf8bdbc17cfb11c7fa979d13ea4fb14dbd1f7a82d101c830106f76b5057e90e3b0425bd2a70b5015dc938a2dc7e2
-
SSDEEP
1536:4Bxq9TP4XcwIwjAT3iuoJ79hcRNOQ22a3l:pAjAT0J79hcRsQ22
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35d74e8867c405f6baec2bb15f048fa7_JaffaCakes118
Files
-
35d74e8867c405f6baec2bb15f048fa7_JaffaCakes118.dll windows:4 windows x86 arch:x86
ff2aed682dbb69a67a9625626c219530
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CompareStringA
EnterCriticalSection
ExitProcess
FindResourceA
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTime
GetSystemTimeAsFileTime
GetTimeFormatA
HeapAlloc
MultiByteToWideChar
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsFree
VirtualAlloc
VirtualFree
lstrcmpA
lstrcmpiA
lstrlenA
msvcrt
_snwprintf
printf
fwprintf
exit
__set_app_type
__p__commode
__getmainargs
wcslen
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
userenv
GetProfilesDirectoryW
GetAppliedGPOListW
FreeGPOListW
ExpandEnvironmentStringsForUserW
UnregisterGPNotification
ntdll
RtlLeaveCriticalSection
RtlNtStatusToDosError
RtlInitUnicodeString
NtEnumerateValueKey
NtCreateSection
NtCreateEvent
LdrLoadDll
RtlInitString
RtlFreeUnicodeString
RtlExpandEnvironmentStrings_U
RtlEnterCriticalSection
RtlCreateTagHeap
NtSetValueKey
NtSetInformationProcess
NtQueryDefaultLocale
NtSetEvent
comdlg32
PrintDlgW
PageSetupDlgW
PageSetupDlgA
LoadAlterBitmap
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
comctl32
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Draw
ImageList_AddMasked
winmm
midiOutReset
midiStreamOut
mixerGetDevCapsW
mixerGetControlDetailsA
midiOutGetNumDevs
mixerGetLineControlsW
mixerSetControlDetails
mmDrvInstall
mmGetCurrentTask
mmTaskBlock
midiOutOpen
midiOutShortMsg
oleaut32
RevokeActiveObject
OleTranslateColor
OleLoadPicture
OleIconToCursor
ClearCustData
SafeArrayAllocData
SafeArrayCreate
SysReAllocString
SysStringLen
VarBstrCat
VarBstrCmp
RegisterTypeLib
oledlg
OleUIBusyA
OleUIAddVerbMenuA
OleUIBusyW
OleUICanConvertOrActivateAs
OleUIUpdateLinksA
OleUIInsertObjectW
OleUIInsertObjectA
OleUIEditLinksW
OleUIEditLinksA
OleUIConvertW
OleUIChangeSourceW
OleUIChangeSourceA
OleUIChangeIconW
OleUIAddVerbMenuW
OleUIChangeIconA
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ