Static task
static1
Behavioral task
behavioral1
Sample
3f943739bd82f26c49b1647040d87d3e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f943739bd82f26c49b1647040d87d3e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3f943739bd82f26c49b1647040d87d3e_JaffaCakes118
-
Size
114KB
-
MD5
3f943739bd82f26c49b1647040d87d3e
-
SHA1
4aa0bdf9b037dccc2b8ee46ff23ac6635bb371f1
-
SHA256
e621678f7a75a19c00d6b12aa2f58ce0ea869860f8575f33236e78bd5387ce6b
-
SHA512
56b78064245b209f269764719cb5eaab726619d5162248bc25db01cd12259461f95462551cc1a531de85cc3eb34dc4a51fc7fd44eaf3303da0d3f52c76c2b457
-
SSDEEP
3072:GrGsRPEVx36URhvXp7ewH+N5/O8FV72eg:lGURdI9m8FVS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f943739bd82f26c49b1647040d87d3e_JaffaCakes118
Files
-
3f943739bd82f26c49b1647040d87d3e_JaffaCakes118.dll windows:4 windows x86 arch:x86
410e36092dee8b7c1a5f607824baae1a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapFree
SetMailslotInfo
CloseConsoleHandle
DeleteFiber
WriteConsoleInputW
SetEnvironmentVariableW
GetDefaultCommConfigA
EnumResourceNamesW
LocalShrink
IsBadReadPtr
FreeEnvironmentStringsW
GetQueuedCompletionStatus
GetTempPathW
GetCurrentDirectoryA
SwitchToThread
SetCommTimeouts
ExpungeConsoleCommandHistoryW
FlushConsoleInputBuffer
GetNextVDMCommand
AllocConsole
FillConsoleOutputAttribute
SetLastError
GetBinaryTypeW
CloseHandle
WaitCommEvent
WritePrivateProfileStructW
BackupRead
GetNumberFormatW
SetConsoleHardwareState
MapViewOfFile
GetCurrentThreadId
SetThreadLocale
VirtualLock
AddAtomA
GetEnvironmentStringsW
GetComputerNameW
TlsSetValue
SetConsoleOutputCP
VirtualAlloc
ConsoleMenuControl
GetThreadPriorityBoost
user32
CreateAcceleratorTableW
DrawStateA
IsDialogMessageA
SetMenuItemInfoA
SwapMouseButton
LoadStringW
GetClassInfoA
DefFrameProcA
RemovePropW
GetDlgItem
CharLowerA
LoadCursorFromFileW
SetCursor
GetDCEx
MB_GetString
ReleaseCapture
GetThreadDesktop
BroadcastSystemMessageA
wsprintfW
UserRealizePalette
OemToCharW
GetSubMenu
GetMessageTime
ChangeMenuW
IsDialogMessage
DrawTextExA
TabbedTextOutW
LoadImageA
CreateWindowExA
SetRect
ScrollWindowEx
SetConsoleReserveKeys
CharUpperA
ChildWindowFromPoint
InvalidateRgn
CharNextW
GetWindowTextLengthA
GetSystemMenu
CopyIcon
gdi32
CreateHatchBrush
GdiIsMetaPrintDC
SetRelAbs
AddFontResourceW
CreateSolidBrush
StretchDIBits
GetStockObject
RemoveFontResourceTracking
GetTextExtentPoint32W
GetCharWidthFloatA
SelectBrushLocal
SetBoundsRect
GdiGetCodePage
SetPixelV
GetKerningPairs
GetTextCharset
GetEnhMetaFileDescriptionW
GdiQueryFonts
GdiGetBatchLimit
GdiProcessSetup
SelectPalette
Escape
EndDoc
GdiConvertDC
Polyline
CreateEnhMetaFileA
TextOutW
AngleArc
DeleteObject
CreateDIBPatternBrush
SetDIBitsToDevice
GdiValidateHandle
GetMapMode
GetSystemPaletteEntries
AbortDoc
GetViewportOrgEx
SetDeviceGammaRamp
CreatePolyPolygonRgn
ole32
STGMEDIUM_UserUnmarshal
MkParseDisplayName
CoCreateInstanceEx
CoGetTreatAsClass
CoFreeLibrary
RegisterDragDrop
CoUninitialize
StringFromIID
OleRegGetMiscStatus
StgSetTimes
UtConvertDvtd32toDvtd16
CoFreeUnusedLibraries
ReadClassStg
CoGetPSClsid
SNB_UserSize
CoSetProxyBlanket
OleGetAutoConvert
IIDFromString
HBRUSH_UserFree
GetConvertStg
CoCopyProxy
CLIPFORMAT_UserMarshal
OleCreateLinkToFileEx
CoRegisterPSClsid
Sections
.idata Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 71KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ