Static task
static1
Behavioral task
behavioral1
Sample
3dedefcb07a00635003d3a7530763de3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3dedefcb07a00635003d3a7530763de3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3dedefcb07a00635003d3a7530763de3_JaffaCakes118
-
Size
49KB
-
MD5
3dedefcb07a00635003d3a7530763de3
-
SHA1
7172ab61eea469ecae8d249cfe3a881268d399f1
-
SHA256
d0e991b3044c6962a4919c49d6625cc99114fa25912f088aa5a1a2522bbbf61d
-
SHA512
b4851f3a42fc437594eb539bfa54098de21dfd46c95f390b957850ff564f03fb5679ea0347a2f8bc3b6ce421f09d284f0f7181e9dbdc9730ea4301c3b6bbbdf2
-
SSDEEP
768:5SXiU9qzuFTuL+WpOv5ZoS8LG+fYpY++xFBJuD7tmbrdKmQxuO41APUka/0hMZWR:sXiU9qzuFTi489EpiJw/pckQ0iJY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dedefcb07a00635003d3a7530763de3_JaffaCakes118
Files
-
3dedefcb07a00635003d3a7530763de3_JaffaCakes118.dll windows:4 windows x86 arch:x86
2183476be78e07ee591eec94cbf21509
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
PostMessageA
FindWindowExA
BeginPaint
kernel32
SizeofResource
TlsFree
SetStdHandle
CloseHandle
CreateConsoleScreenBuffer
DisableThreadLibraryCalls
DuplicateHandle
ExitProcess
GetACP
GetCommandLineA
GetLocaleInfoW
GetModuleHandleA
GetNumberFormatA
GetOEMCP
GetStartupInfoA
GetStdHandle
GetVersionExA
GlobalAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
InterlockedIncrement
LCMapStringA
LocalAlloc
MultiByteToWideChar
RtlUnwind
SearchPathA
SetLastError
advapi32
SetKernelObjectSecurity
RemoveTraceCallback
RegisterServiceCtrlHandlerW
ElfReadEventLogW
GetTraceEnableLevel
IsValidSecurityDescriptor
OpenEncryptedFileRawA
QueryServiceLockStatusA
RegReplaceKeyA
olepro32
OleCreatePropertyFrameIndirect
oleacc
LresultFromObject
GetStateTextA
AccessibleObjectFromEvent
security
InitSecurityInterfaceA
DeleteSecurityPackageW
UnsealMessage
AddSecurityPackageW
setupapi
SetupQueryFileLogW
SetupOpenAppendInfFileA
SetupQueryInfVersionInformationW
SetupDefaultQueueCallbackA
SetupDiCreateDevRegKeyA
SetupDiCreateDeviceInterfaceA
SetupGetLineByIndexA
Sections
.text Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ