owruiOrro
Static task
static1
Behavioral task
behavioral1
Sample
3acd097ff82e51926fbf704e9760b644_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3acd097ff82e51926fbf704e9760b644_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3acd097ff82e51926fbf704e9760b644_JaffaCakes118
-
Size
155KB
-
MD5
3acd097ff82e51926fbf704e9760b644
-
SHA1
c85d91b31360d6eceefae1d821ad5a44af8b4006
-
SHA256
7ea0383c0500bbda7754fee71e8021feff6e612b4866859945fde27e2f2e1370
-
SHA512
fcd411d204b25a2909170a70aacb65a376e2dcdda59c2f7cde2a6319bca69e20bd3c7e98df78a7ef4072c808f772ee477311a40cfa134817d1005249617414e4
-
SSDEEP
3072:Med546RAZKE09yXwIFHMj0rPkf2cX4+/3qJxL:/BEWWw0HMfHjk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3acd097ff82e51926fbf704e9760b644_JaffaCakes118
Files
-
3acd097ff82e51926fbf704e9760b644_JaffaCakes118.dll windows:4 windows x86 arch:x86
805b40a8b54bdc16e9de0ea2cc4e2691
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenW
GetStringTypeExW
GetStringTypeExA
CompareStringA
lstrcmpiA
CompareStringW
FileTimeToLocalFileTime
GetLastError
lstrlenA
SetEnvironmentVariableA
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetDriveTypeA
CreateFileA
CloseHandle
GetLocaleInfoW
lstrcmpiW
user32
ScrollDC
CheckMenuItem
EnableMenuItem
SetMenuDefaultItem
InsertMenuItemA
ModifyMenuA
GrayStringA
GetTabbedTextExtentA
DrawTextExA
DrawTextA
DrawFocusRect
DrawEdge
GetScrollRange
GetScrollPos
GetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
EndDialog
PostQuitMessage
MapDialogRect
SendMessageA
MessageBoxA
PeekMessageA
PostMessageA
TabbedTextOutA
DispatchMessageA
TranslateMessage
GetMessageA
ValidateRect
SetWindowsHookExA
GetCursorPos
DrawFrameControl
gdi32
GetObjectA
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreateDIBPatternBrushPt
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutA
CreatePatternBrush
comdlg32
GetOpenFileNameA
shell32
SHGetFileInfoA
DragAcceptFiles
ExtractIconA
DragQueryFileA
DragFinish
shlwapi
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
PathIsUNCA
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ