Static task
static1
Behavioral task
behavioral1
Sample
39234c96803f0bc8489df7d1e2c10e10_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39234c96803f0bc8489df7d1e2c10e10_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
39234c96803f0bc8489df7d1e2c10e10_JaffaCakes118
-
Size
160KB
-
MD5
39234c96803f0bc8489df7d1e2c10e10
-
SHA1
50e2905abfcf007610593deee5c37b362837c72c
-
SHA256
805906486f0fb60d23277da5000a910ac4ba7a7c964024bf0d8c93ee95ab3058
-
SHA512
49abd34081d5d77f4e38eba9bd6672e2d4a2b495c55a96795baa3e97c1ebc2946f1c75e89290f04552387bd440012a032eabe443912a454212a109b6f204e7e0
-
SSDEEP
3072:ZZG8/m7p7ICftZRfCl+LblysFHO1SMqqDLy/8e91L2wCBs:PduNUClrfCm0sw1xqqDLub91L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39234c96803f0bc8489df7d1e2c10e10_JaffaCakes118
Files
-
39234c96803f0bc8489df7d1e2c10e10_JaffaCakes118.dll windows:4 windows x86 arch:x86
1234d22a1d8ee6ae38a41144599d529a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTimeFormatW
WaitForSingleObject
lstrcatW
InterlockedIncrement
LoadLibraryW
GlobalAlloc
QueryPerformanceCounter
GetEnvironmentVariableW
GlobalFree
GlobalLock
InterlockedDecrement
FindResourceW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetDateFormatW
GetCommandLineA
GetDateFormatA
CompareStringA
GetFileSize
Sleep
CreateFileA
GetLocalTime
SetFilePointer
SetEndOfFile
GetProcAddress
CloseHandle
GetCurrentProcess
LocalFree
LocalAlloc
GetSystemTimeAsFileTime
OutputDebugStringA
GetComputerNameW
ReleaseMutex
CreateFileW
lstrcpynW
lstrcpyW
DisableThreadLibraryCalls
GetProcessHeap
FindResourceExA
SizeofResource
LoadResource
GetTimeFormatA
LockResource
FreeLibrary
lstrcmpA
lstrlenW
FormatMessageW
lstrcpyA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcatA
WriteFile
VirtualProtect
GlobalUnlock
user32
wsprintfW
RegisterClipboardFormatW
LoadBitmapW
LoadImageW
MessageBoxW
LoadStringW
SendMessageW
SetWindowTextW
EndDialog
SendDlgItemMessageW
ReleaseCapture
SetWindowLongA
SetCapture
MoveWindow
CreateWindowExA
PostMessageA
SetClassLongA
GetDlgItemTextW
GetParent
SetWindowPos
wsprintfA
CallWindowProcA
IsWindowEnabled
PeekMessageA
SetFocus
EnableWindow
GetDlgItem
ShowWindow
GetFocus
UpdateWindow
GetNextDlgTabItem
GetClientRect
DrawFocusRect
LoadCursorA
WinHelpW
ReleaseDC
GetDC
SetWindowTextA
SendMessageA
SetDlgItemTextW
SendDlgItemMessageA
LoadStringA
GetDesktopWindow
InvalidateRect
FillRect
MapWindowPoints
GetWindowRect
SetCursor
GetWindowLongA
advapi32
GetTokenInformation
OpenSCManagerW
OpenServiceW
QueryServiceConfigA
LockServiceDatabase
ChangeServiceConfigA
CryptAcquireContextA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
StartServiceA
QueryServiceStatus
RegOpenKeyExA
FreeSid
EqualSid
AllocateAndInitializeSid
CloseServiceHandle
StartServiceW
UnlockServiceDatabase
CryptGetUserKey
CryptDestroyKey
CryptSetProvParam
CryptGetProvParam
CryptReleaseContext
RegCreateKeyExW
RegSetValueExW
RegSetValueExA
RegOpenKeyExW
RegCloseKey
OpenProcessToken
ControlService
gdi32
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
SetBkColor
CreateBitmap
GetObjectA
DeleteObject
GetFontResourceInfoW
GetObjectW
DeleteDC
ole32
CoTaskMemFree
StringFromCLSID
StringFromGUID2
CLSIDFromString
CoTaskMemAlloc
msvcrt
_except_handler3
__CxxFrameHandler
wcschr
memmove
iswspace
iswprint
_wcsicmp
wcscmp
wcscpy
malloc
_adjust_fdiv
_initterm
free
mbstowcs
wcstombs
wcslen
_CxxThrowException
__dllonexit
_onexit
wcscat
Sections
.text Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ