Static task
static1
Behavioral task
behavioral1
Sample
442316bad944cf3c4d5b22efa0f766cd_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
442316bad944cf3c4d5b22efa0f766cd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
442316bad944cf3c4d5b22efa0f766cd_JaffaCakes118
-
Size
114KB
-
MD5
442316bad944cf3c4d5b22efa0f766cd
-
SHA1
0b6be9251b36f7fb4ffdbbb9516aa982d6aa7abc
-
SHA256
76bc47ad2714979df24b23f966d988b02671f2b0bf1c6af0d98473963bf9ef4a
-
SHA512
ad8f9f653036806c69f9c577c20b2713b8215927d9ee3d8f64e900fb629aaa3251a2de972ce4013ea8253db62c6ab0b710d7b47b81eea774857b61c029cda170
-
SSDEEP
3072:GrGsRPEVx36URhvXp7ewH+N5/O8FV72eg:lGURdI9m8FVS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 442316bad944cf3c4d5b22efa0f766cd_JaffaCakes118
Files
-
442316bad944cf3c4d5b22efa0f766cd_JaffaCakes118.dll windows:4 windows x86 arch:x86
410e36092dee8b7c1a5f607824baae1a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapFree
SetMailslotInfo
CloseConsoleHandle
DeleteFiber
WriteConsoleInputW
SetEnvironmentVariableW
GetDefaultCommConfigA
EnumResourceNamesW
LocalShrink
IsBadReadPtr
FreeEnvironmentStringsW
GetQueuedCompletionStatus
GetTempPathW
GetCurrentDirectoryA
SwitchToThread
SetCommTimeouts
ExpungeConsoleCommandHistoryW
FlushConsoleInputBuffer
GetNextVDMCommand
AllocConsole
FillConsoleOutputAttribute
SetLastError
GetBinaryTypeW
CloseHandle
WaitCommEvent
WritePrivateProfileStructW
BackupRead
GetNumberFormatW
SetConsoleHardwareState
MapViewOfFile
GetCurrentThreadId
SetThreadLocale
VirtualLock
AddAtomA
GetEnvironmentStringsW
GetComputerNameW
TlsSetValue
SetConsoleOutputCP
VirtualAlloc
ConsoleMenuControl
GetThreadPriorityBoost
user32
CreateAcceleratorTableW
DrawStateA
IsDialogMessageA
SetMenuItemInfoA
SwapMouseButton
LoadStringW
GetClassInfoA
DefFrameProcA
RemovePropW
GetDlgItem
CharLowerA
LoadCursorFromFileW
SetCursor
GetDCEx
MB_GetString
ReleaseCapture
GetThreadDesktop
BroadcastSystemMessageA
wsprintfW
UserRealizePalette
OemToCharW
GetSubMenu
GetMessageTime
ChangeMenuW
IsDialogMessage
DrawTextExA
TabbedTextOutW
LoadImageA
CreateWindowExA
SetRect
ScrollWindowEx
SetConsoleReserveKeys
CharUpperA
ChildWindowFromPoint
InvalidateRgn
CharNextW
GetWindowTextLengthA
GetSystemMenu
CopyIcon
gdi32
CreateHatchBrush
GdiIsMetaPrintDC
SetRelAbs
AddFontResourceW
CreateSolidBrush
StretchDIBits
GetStockObject
RemoveFontResourceTracking
GetTextExtentPoint32W
GetCharWidthFloatA
SelectBrushLocal
SetBoundsRect
GdiGetCodePage
SetPixelV
GetKerningPairs
GetTextCharset
GetEnhMetaFileDescriptionW
GdiQueryFonts
GdiGetBatchLimit
GdiProcessSetup
SelectPalette
Escape
EndDoc
GdiConvertDC
Polyline
CreateEnhMetaFileA
TextOutW
AngleArc
DeleteObject
CreateDIBPatternBrush
SetDIBitsToDevice
GdiValidateHandle
GetMapMode
GetSystemPaletteEntries
AbortDoc
GetViewportOrgEx
SetDeviceGammaRamp
CreatePolyPolygonRgn
ole32
STGMEDIUM_UserUnmarshal
MkParseDisplayName
CoCreateInstanceEx
CoGetTreatAsClass
CoFreeLibrary
RegisterDragDrop
CoUninitialize
StringFromIID
OleRegGetMiscStatus
StgSetTimes
UtConvertDvtd32toDvtd16
CoFreeUnusedLibraries
ReadClassStg
CoGetPSClsid
SNB_UserSize
CoSetProxyBlanket
OleGetAutoConvert
IIDFromString
HBRUSH_UserFree
GetConvertStg
CoCopyProxy
CLIPFORMAT_UserMarshal
OleCreateLinkToFileEx
CoRegisterPSClsid
Sections
.idata Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 71KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ