Wdmnw
Static task
static1
Behavioral task
behavioral1
Sample
3b0b4749f07db257c049f39a76309163_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b0b4749f07db257c049f39a76309163_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3b0b4749f07db257c049f39a76309163_JaffaCakes118
-
Size
140KB
-
MD5
3b0b4749f07db257c049f39a76309163
-
SHA1
a7c3bef9ef660f85b55bcde514d4b085be1b2832
-
SHA256
beef7109e8dcf8b212354e177fa7e81b53065c2da483518dd013c1f022bc85dd
-
SHA512
7711708f6534430c3db2151dc01840790a740c901c3c92c28c1f542b2130315af851db44c811dd418d56febd15ea7f74ee55e85da65762d32f5d78ea6782bf6b
-
SSDEEP
3072:9/Gb/KxOZbx+9hpva68XBE/nL/4Blz6zuFec:BGb/Ksb89hpS68RSL/Iec
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b0b4749f07db257c049f39a76309163_JaffaCakes118
Files
-
3b0b4749f07db257c049f39a76309163_JaffaCakes118.dll windows:4 windows x86 arch:x86
09344a8499b89d8a910b0937643f58e7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
ElfOpenBackupEventLogW
CryptAcquireContextW
CryptDestroyHash
CryptGetHashParam
CryptImportKey
CryptReleaseContext
GetTrusteeFormW
GetTrusteeNameA
I_ScSetServiceBitsA
LsaAddPrivilegesToAccount
LsaCreateAccount
OpenEventLogW
RegCloseKey
RegConnectRegistryW
RegCreateKeyExW
RegEnumValueW
RegQueryValueExW
RegSetValueExA
RegSetValueExW
SystemFunction030
UnregisterTraceGuids
gdi32
AnimatePalette
CreateBitmapIndirect
CreateFontIndirectW
CreatePen
DeleteDC
DeleteObject
EndDoc
EndPage
EqualRgn
GdiGetDC
GetDeviceCaps
GetLogColorSpaceA
GetMetaFileA
GetRegionData
ResetDCA
StartDocW
StartFormPage
StartPage
kernel32
LoadResource
FindResourceA
GetCommandLineW
VirtualAlloc
CloseHandle
CreateThread
CreateWaitableTimerW
DeleteVolumeMountPointW
EnterCriticalSection
FindNextVolumeA
GetACP
GetCommModemStatus
GetDiskFreeSpaceA
GetFileAttributesExW
GetLastError
GetPrivateProfileSectionNamesA
GetProcessHeap
GetProfileSectionA
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GlobalFree
HeapFree
LocalAlloc
LocalFree
LocalShrink
MultiByteToWideChar
UnregisterWaitEx
WaitForSingleObject
WideCharToMultiByte
lstrcmpW
lstrcmpi
lstrcpyA
lstrcpyW
lstrlen
lstrlenA
lstrlenW
CompareStringW
CompareStringA
GetLocaleInfoW
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
HeapSize
LoadLibraryA
VirtualQuery
SetEnvironmentVariableA
InterlockedExchange
RtlUnwind
InitializeCriticalSection
IsBadWritePtr
HeapReAlloc
GetCPInfo
GetOEMCP
FatalAppExitA
LeaveCriticalSection
WriteFile
UnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
SetLastError
TlsAlloc
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
ExitProcess
GetVersionExA
GetCommandLineA
GetCurrentThreadId
ole32
OleFlushClipboard
OleConvertIStorageToOLESTREAMEx
GetRunningObjectTable
CoGetPSClsid
CoGetMalloc
StgOpenStorageOnILockBytes
oleaut32
SafeArrayAccessData
VarI2FromCy
VarUI2FromCy
VarUI2FromR8
VariantTimeToDosDateTime
VarDecFromI2
rpcrt4
CStdStubBuffer_Invoke
NdrByteCountPointerMarshall
NdrConformantArrayBufferSize
NdrUserMarshalSimpleTypeConvert
NdrVaryingArrayMarshall
RpcBindingServerFromClient
RpcServerUseProtseqW
I_RpcBCacheFree
user32
PostMessageW
MessageBoxW
MessageBoxExW
LoadStringW
LoadCursorW
KillTimer
GetWindowThreadProcessId
GetWindowLongW
GetUserObjectSecurity
GetQueueStatus
GetParent
ReleaseDC
GetKeyState
GetDlgItemTextW
GetDlgItem
GetDC
GetCaretPos
EndDialog
EnableWindow
DialogBoxParamW
DdeQueryConvInfo
CreateAcceleratorTableA
AdjustWindowRect
SendDlgItemMessageW
SendMessageW
SetClipboardViewer
SetCursor
SetDlgItemTextW
SetFocus
SetRectEmpty
SetWindowLongW
SetTimer
SetWindowTextW
SetWindowsHookExW
ShowWindow
SwapMouseButton
WINNLSGetEnableStatus
GetMenuDefaultItem
CallMsgFilterW
Exports
Exports
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ