GetObjectData
Static task
static1
Behavioral task
behavioral1
Sample
438c1014f50ca6a079100c3cf765c5fc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
438c1014f50ca6a079100c3cf765c5fc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
438c1014f50ca6a079100c3cf765c5fc_JaffaCakes118
-
Size
216KB
-
MD5
438c1014f50ca6a079100c3cf765c5fc
-
SHA1
7cd499827eadc6ff72a83cd1fdf3827ae3fa75fa
-
SHA256
513bbb438adf3d138f069bfbe2de58a04a053aa1b0956110cfac525e4c788223
-
SHA512
9b2335ee10545c6cf562c11eab7282ed55544565670e4b88fd36ee299d380d23f38d4c539549067f6980a1eac6b1c2143d9d3f889d5829295f8e7351417cb74d
-
SSDEEP
6144:TtcNt8u6C4rHh7wG6DF/biTfmtU/0B4XzEv6:s16C497WBezN/0B4Xov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 438c1014f50ca6a079100c3cf765c5fc_JaffaCakes118
Files
-
438c1014f50ca6a079100c3cf765c5fc_JaffaCakes118.dll windows:4 windows x86 arch:x86
8653b0733040ba3f6512bc6e50273990
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
ExitThread
GetCommandLineA
GetDriveTypeA
GetExitCodeThread
GetLastError
GetLocaleInfoA
GetModuleHandleA
GetModuleHandleW
GetProcessAffinityMask
GetSystemInfo
GetTimeFormatA
GetVersionExA
GlobalAlloc
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
IsBadReadPtr
IsBadStringPtrA
MulDiv
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsGetValue
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA
user32
WindowFromPoint
SetWindowTextA
SetScrollInfo
SetPropA
PostMessageA
IsIconic
IsDlgButtonChecked
InvalidateRgn
GetCursorPos
FindWindowExA
DialogBoxIndirectParamA
DefWindowProcA
CheckMenuRadioItem
BeginDeferWindowPos
DispatchMessageA
advapi32
RegSaveKeyW
RegReplaceKeyA
RegEnumKeyExW
RegEnumKeyA
QueryServiceStatusEx
QueryServiceConfigA
LsaGetUserName
LsaEnumerateAccounts
LookupPrivilegeValueA
InstallApplication
GetTraceEnableFlags
CancelOverlappedAccess
AbortSystemShutdownA
SetSecurityDescriptorControl
ddraw
DDInternalLock
DDInternalUnlock
DSoundHelp
DirectDrawCreate
DirectDrawCreateClipper
DirectDrawCreateEx
DirectDrawEnumerateExA
DirectDrawEnumerateW
GetDDSurfaceLocal
ole32
CoCreateInstance
CoDosDateTimeToFileTime
CoTestCancel
IsEqualGUID
Exports
Exports
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ