Static task
static1
Behavioral task
behavioral1
Sample
45268b33785b4aac5868b21c3e82453e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45268b33785b4aac5868b21c3e82453e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
45268b33785b4aac5868b21c3e82453e_JaffaCakes118
-
Size
168KB
-
MD5
45268b33785b4aac5868b21c3e82453e
-
SHA1
ada2f1b790a52696be37924891666ded6a00f63d
-
SHA256
789dce377ea959646eef041e7e2fa3664487037c866a4794f422d77ccaf06298
-
SHA512
eac8c98d7e43ea788dde562edacdfa48324ac8b906f3af8b72f59e69cc2b12191a0093ed12e0f2e2c7b832980b5cc98315719ed359ab506a20490f0de6dc4c2a
-
SSDEEP
3072:rAXHmzpF7yYOKR5yV2v/gvAKb6NSRzP9U6xPQzrbhK/TNUeakodr:E2zpFBhyV2v/gHb6MRzP9U6x4zro/xNa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45268b33785b4aac5868b21c3e82453e_JaffaCakes118
Files
-
45268b33785b4aac5868b21c3e82453e_JaffaCakes118.dll windows:4 windows x86 arch:x86
1943dcce18305d8e097d725462bce541
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalFree
GlobalAlloc
GetLocaleInfoA
MultiByteToWideChar
GlobalLock
GlobalSize
GlobalUnlock
GetTickCount
GetModuleHandleA
IsDBCSLeadByteEx
InterlockedIncrement
GetCommandLineA
SetStdHandle
GetOEMCP
LoadLibraryA
GetProcAddress
GetACP
SetFilePointer
RtlUnwind
GetCPInfo
GetStringTypeA
GetStringTypeW
VirtualAlloc
VirtualFree
HeapReAlloc
HeapDestroy
GetEnvironmentStringsW
HeapCreate
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetFileType
SetHandleCount
GetStartupInfoA
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
TlsFree
GetModuleFileNameA
MulDiv
GetCurrentThreadId
GetStdHandle
WriteFile
GetLastError
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
WideCharToMultiByte
CloseHandle
FlushFileBuffers
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
ExitProcess
InterlockedDecrement
InitializeCriticalSection
HeapFree
GetVersion
HeapAlloc
user32
GetWindowRect
SetWindowPos
SetScrollRange
SetScrollInfo
GetClientRect
ShowWindow
InvalidateRect
SetCursor
LoadCursorA
SendMessageA
GetDlgCtrlID
GetWindowLongA
CreateWindowExA
GetSystemMetrics
CreatePopupMenu
GetSysColor
DestroyMenu
TrackPopupMenu
GetDoubleClickTime
GetKeyState
BeginPaint
RegisterClipboardFormatA
EndPaint
GetCursorPos
SetFocus
ScreenToClient
SetTimer
DefWindowProcA
KillTimer
UpdateWindow
ReleaseCapture
SetCapture
ScrollWindow
SetScrollPos
GetDC
SetWindowLongA
RegisterClassExA
GetKeyboardLayout
ReleaseDC
SystemParametersInfoA
IsClipboardFormatAvailable
AppendMenuA
GetClipboardData
SetClipboardData
OpenClipboard
EmptyClipboard
GetScrollInfo
CloseClipboard
GetParent
DestroyWindow
FillRect
GetScrollRange
gdi32
RoundRect
GetTextExtentPoint32W
GetTextExtentPoint32A
DeleteObject
CreatePalette
CreateFontIndirectA
DeleteDC
SelectPalette
SelectObject
SetTextAlign
CreateCompatibleDC
CreateCompatibleBitmap
CreatePen
CreateSolidBrush
GetNearestColor
GetDeviceCaps
MoveToEx
LineTo
Polygon
IntersectClipRect
RealizePalette
GetTextMetricsA
GetTextExtentExPointW
GetTextExtentExPointA
Rectangle
SetTextColor
ExtTextOutW
BitBlt
Ellipse
CreatePatternBrush
SetBkColor
ExtTextOutA
ole32
RegisterDragDrop
DoDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize
imm32
ImmReleaseContext
ImmSetCompositionFontA
ImmSetCompositionWindow
ImmGetContext
Sections
.text Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ