Static task
static1
Behavioral task
behavioral1
Sample
4105c3800481fd69bc42d295feaa3a11_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4105c3800481fd69bc42d295feaa3a11_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4105c3800481fd69bc42d295feaa3a11_JaffaCakes118
-
Size
65KB
-
MD5
4105c3800481fd69bc42d295feaa3a11
-
SHA1
774fd0224ea03527cf016fc5dbf4f9cac63e90af
-
SHA256
55c1cb4a5e2878262c595cbb5b3947f43f0e5207235c92a3bc6f7068f1de91ab
-
SHA512
e0a4556683162cecc95f973cdb84ac6c4c1919e5e9687a44770422a042e1dbd3a9dc4e105f01148636ae087fb03a4ab79ca05681da6403ce2e73d8310abceb34
-
SSDEEP
1536:qbl0zZ/iCw59di8LBFK7DIzfdC8l9C5xh3x:y0zZqhdimwUs8lM5xz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4105c3800481fd69bc42d295feaa3a11_JaffaCakes118
Files
-
4105c3800481fd69bc42d295feaa3a11_JaffaCakes118.dll windows:4 windows x86 arch:x86
70266f21bf9e8fbe0a4177a12b3dd9a9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
LsaEnumerateTrustedDomains
LsaGetRemoteUserName
LsaICLookupNames
LsaLookupPrivilegeDisplayName
RegCloseKey
LsaGetUserName
dsound
DirectSoundCreate
DirectSoundFullDuplexCreate
DirectSoundCaptureEnumerateA
DirectSoundCaptureCreate8
kernel32
GetModuleHandleA
GetLocalTime
GetCommandLineA
ExitProcess
CloseHandle
LocalAlloc
SetUnhandledExceptionFilter
GetStartupInfoA
msvfw32
MCIWndCreateA
ICLocate
ICInstall
DrawDibGetBuffer
DrawDibChangePalette
ole32
CoInitialize
CoTaskMemAlloc
CoUninitialize
CoGetClassObject
CreateStreamOnHGlobal
DoDragDrop
GetRunningObjectTable
OleInitialize
OleLockRunning
OleUninitialize
ProgIDFromCLSID
ReadClassStg
StgCreateDocfileOnILockBytes
WriteClassStm
CoCreateInstance
CLSIDFromProgID
CreateBindCtx
msvbvm60
__vbaFailedFriend
__vbaCyMul
user32
CreateAcceleratorTableA
IsCharUpperA
LoadIconA
ShowCursor
CharToOemA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ