Static task
static1
Behavioral task
behavioral1
Sample
4053a9cce6ee37c08fb1e4169086f7ae_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4053a9cce6ee37c08fb1e4169086f7ae_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4053a9cce6ee37c08fb1e4169086f7ae_JaffaCakes118
-
Size
114KB
-
MD5
4053a9cce6ee37c08fb1e4169086f7ae
-
SHA1
56c218233fa4f682bc5096f13baefdfc40e95f30
-
SHA256
2a8405c74aca923b7a3221fc61822e3962c1bfc84f41764f0b413a460a275c31
-
SHA512
09f2ff7950f26a722028849dddf8400c4f3635f939f448f2b8e7207167c7efab0e13cf25449fd974074aeb2aac9f432fd00d42792f8aec64b00eefb13911952b
-
SSDEEP
3072:GrGsRPEVx36URhvXp7ewH+N5/O8FV72eg:lGURdI9m8FVS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4053a9cce6ee37c08fb1e4169086f7ae_JaffaCakes118
Files
-
4053a9cce6ee37c08fb1e4169086f7ae_JaffaCakes118.dll windows:4 windows x86 arch:x86
410e36092dee8b7c1a5f607824baae1a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapFree
SetMailslotInfo
CloseConsoleHandle
DeleteFiber
WriteConsoleInputW
SetEnvironmentVariableW
GetDefaultCommConfigA
EnumResourceNamesW
LocalShrink
IsBadReadPtr
FreeEnvironmentStringsW
GetQueuedCompletionStatus
GetTempPathW
GetCurrentDirectoryA
SwitchToThread
SetCommTimeouts
ExpungeConsoleCommandHistoryW
FlushConsoleInputBuffer
GetNextVDMCommand
AllocConsole
FillConsoleOutputAttribute
SetLastError
GetBinaryTypeW
CloseHandle
WaitCommEvent
WritePrivateProfileStructW
BackupRead
GetNumberFormatW
SetConsoleHardwareState
MapViewOfFile
GetCurrentThreadId
SetThreadLocale
VirtualLock
AddAtomA
GetEnvironmentStringsW
GetComputerNameW
TlsSetValue
SetConsoleOutputCP
VirtualAlloc
ConsoleMenuControl
GetThreadPriorityBoost
user32
CreateAcceleratorTableW
DrawStateA
IsDialogMessageA
SetMenuItemInfoA
SwapMouseButton
LoadStringW
GetClassInfoA
DefFrameProcA
RemovePropW
GetDlgItem
CharLowerA
LoadCursorFromFileW
SetCursor
GetDCEx
MB_GetString
ReleaseCapture
GetThreadDesktop
BroadcastSystemMessageA
wsprintfW
UserRealizePalette
OemToCharW
GetSubMenu
GetMessageTime
ChangeMenuW
IsDialogMessage
DrawTextExA
TabbedTextOutW
LoadImageA
CreateWindowExA
SetRect
ScrollWindowEx
SetConsoleReserveKeys
CharUpperA
ChildWindowFromPoint
InvalidateRgn
CharNextW
GetWindowTextLengthA
GetSystemMenu
CopyIcon
gdi32
CreateHatchBrush
GdiIsMetaPrintDC
SetRelAbs
AddFontResourceW
CreateSolidBrush
StretchDIBits
GetStockObject
RemoveFontResourceTracking
GetTextExtentPoint32W
GetCharWidthFloatA
SelectBrushLocal
SetBoundsRect
GdiGetCodePage
SetPixelV
GetKerningPairs
GetTextCharset
GetEnhMetaFileDescriptionW
GdiQueryFonts
GdiGetBatchLimit
GdiProcessSetup
SelectPalette
Escape
EndDoc
GdiConvertDC
Polyline
CreateEnhMetaFileA
TextOutW
AngleArc
DeleteObject
CreateDIBPatternBrush
SetDIBitsToDevice
GdiValidateHandle
GetMapMode
GetSystemPaletteEntries
AbortDoc
GetViewportOrgEx
SetDeviceGammaRamp
CreatePolyPolygonRgn
ole32
STGMEDIUM_UserUnmarshal
MkParseDisplayName
CoCreateInstanceEx
CoGetTreatAsClass
CoFreeLibrary
RegisterDragDrop
CoUninitialize
StringFromIID
OleRegGetMiscStatus
StgSetTimes
UtConvertDvtd32toDvtd16
CoFreeUnusedLibraries
ReadClassStg
CoGetPSClsid
SNB_UserSize
CoSetProxyBlanket
OleGetAutoConvert
IIDFromString
HBRUSH_UserFree
GetConvertStg
CoCopyProxy
CLIPFORMAT_UserMarshal
OleCreateLinkToFileEx
CoRegisterPSClsid
Sections
.idata Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 71KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ