Static task
static1
Behavioral task
behavioral1
Sample
3a24f7925c13607f090b87661d038fff_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a24f7925c13607f090b87661d038fff_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3a24f7925c13607f090b87661d038fff_JaffaCakes118
-
Size
126KB
-
MD5
3a24f7925c13607f090b87661d038fff
-
SHA1
8144abc3e574b9c0387347ff1a54e97f5cd521f5
-
SHA256
eb87737df62fa325fd5d97e0bcc266ae240759ca180cbd22bdad3d98946e9b73
-
SHA512
3f0099f71287a5f4846b0f8867f463f09697220391a65ea89d6677493a401402cbbfb92286a58460286a14c6a9c9cf7e73e94f3e135796437f2f1506f556e0d7
-
SSDEEP
3072:P/GYCn9x2obI8t1ZVHR0lNnWVIRdYxSgK/:XGYC9xJIw1ZhOPnt0xSgK/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a24f7925c13607f090b87661d038fff_JaffaCakes118
Files
-
3a24f7925c13607f090b87661d038fff_JaffaCakes118.dll windows:4 windows x86 arch:x86
2a66da3628682ff1727ae8032548cdaf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comctl32
ImageList_DragMove
ImageList_Merge
ImageList_LoadImageW
ImageList_Create
InitCommonControls
ImageList_Read
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_EndDrag
ImageList_GetIcon
ImageList_GetImageRect
ImageList_DrawIndirect
ImageList_DragLeave
ImageList_DragEnter
ImageList_Copy
ImageList_GetDragImage
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_Remove
ImageList_BeginDrag
ImageList_AddMasked
ImageList_Merge
ImageList_LoadImage
ImageList_GetImageCount
ImageList_Create
ImageList_DragShowNolock
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_BeginDrag
ImageList_Create
InitCommonControls
ImageList_Replace
ImageList_DrawIndirect
ImageList_DragMove
ImageList_LoadImageW
ImageList_LoadImage
ImageList_Copy
ImageList_Remove
InitCommonControls
ImageList_Copy
ImageList_Draw
ImageList_Replace
ImageList_GetImageRect
ImageList_LoadImage
ImageList_DragShowNolock
ImageList_DrawIndirect
ImageList_Create
ImageList_DrawEx
ImageList_GetIconSize
ImageList_AddIcon
ImageList_ReplaceIcon
ImageList_LoadImageA
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_DragEnter
user32
DrawIconEx
IsMenu
IsWindow
DialogBoxParamW
DrawTextA
InsertMenuA
DialogBoxParamA
AppendMenuW
DrawIcon
CopyImage
GetDC
AlignRects
DrawIcon
GetWindowTextLengthA
GetDC
DrawTextW
DialogBoxParamW
CopyRect
InsertMenuA
AppendMenuW
LoadCursorA
BlockInput
GetCursor
GetFocus
DrawIconEx
GetMenu
DrawTextA
CopyIcon
IsWindow
CloseWindow
advapi32
RegQueryValueW
RegEnumValueA
RegReplaceKeyA
RegQueryValueExA
RegEnumKeyExW
RegOpenKeyExA
RegOpenKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegLoadKeyA
RegEnumKeyA
RegEnumValueW
RegOpenKeyA
RegQueryValueA
RegCreateKeyExW
RegEnumValueA
RegFlushKey
RegDeleteValueW
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyExA
RegEnumKeyExW
RegOpenKeyExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegReplaceKeyA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegGetKeySecurity
RegEnumKeyExW
RegOpenKeyExW
RegReplaceKeyW
RegCreateKeyW
RegLoadKeyA
RegEnumValueA
RegOpenKeyW
kernel32
ReadFile
GetLastError
ExitThread
OpenFileMappingA
SetLastError
CopyFileW
WriteFile
CreateProcessA
GetFileSize
DeleteFileW
GetCommandLineA
GetStdHandle
FindFirstFileA
CopyFileExW
GetConsoleMode
GetCPInfo
FindAtomA
CopyFileExA
ReadFile
ExitThread
FindAtomA
CreateThread
OpenFile
GetStdHandle
GetFileSize
Sleep
DeleteFileW
CreateProcessA
ReadConsoleA
GlobalFree
CreateThread
GetLastError
FindAtomA
OpenFileMappingA
GetStdHandle
WriteFile
GetCommandLineA
OpenFile
DeleteFileA
GetFileSize
SetLastError
CopyFileW
CreateDirectoryA
CreateProcessA
GetCPInfo
DeleteFileW
GlobalFree
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rDAta Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 383B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reLOc Size: 512B - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ