Static task
static1
Behavioral task
behavioral1
Sample
479cb32d4a0690e765fb1b9a964f68ee_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
479cb32d4a0690e765fb1b9a964f68ee_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
479cb32d4a0690e765fb1b9a964f68ee_JaffaCakes118
-
Size
116KB
-
MD5
479cb32d4a0690e765fb1b9a964f68ee
-
SHA1
90784eacfd01c2f0df46952d96fd45d47f191ba6
-
SHA256
5ccc8b9a26472a2755bbc6786e5086bd5c0426927012910f51b64a725dc1548e
-
SHA512
bfb8490cf4750c5e6384896d899155ce5034b531e201765be632962949ffcdec936d05f2c6aef1a2d182552751c76a6c32e0fd65f04de27fea6c2792d5aebd13
-
SSDEEP
1536:5SEcwctL7cTS4CN0MRKdIOheQeBZ53MLn17ctRvZImttqEPHqAOTzIyIthlvdJPt:L5AUT4zkyOhoBIxotR2fYHqqFthlvdD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 479cb32d4a0690e765fb1b9a964f68ee_JaffaCakes118
Files
-
479cb32d4a0690e765fb1b9a964f68ee_JaffaCakes118.dll windows:4 windows x86 arch:x86
1b4007377be8340697d860dac97f990d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateEventW
WideCharToMultiByte
lstrlenW
GetTickCount
lstrcmpW
CloseHandle
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcess
GetLocaleInfoA
InterlockedDecrement
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
LoadLibraryA
GetCPInfo
GetOEMCP
GetACP
GetEnvironmentStringsW
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetSystemInfo
GetModuleHandleA
FormatMessageW
LocalAlloc
LocalFree
GlobalLock
IsBadReadPtr
IsBadWritePtr
GlobalUnlock
GlobalFree
GetModuleFileNameA
DisableThreadLibraryCalls
GetVersionExA
InterlockedIncrement
MultiByteToWideChar
GlobalAlloc
VirtualProtect
GetStringTypeW
GetCommandLineA
GetProcAddress
ExitProcess
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
user32
FillRect
wsprintfW
InvalidateRect
GetFocus
GetWindowLongW
GetDC
DestroyWindow
GetParent
SetFocus
GetKeyState
CallWindowProcW
EndPaint
ReleaseDC
GetSysColor
BeginPaint
EnableWindow
SendMessageW
GetClientRect
SetTimer
CreateWindowExW
SetWindowLongW
advapi32
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
gdi32
SetBkColor
GetCharWidthW
TextOutW
SetTextColor
CreateFontIndirectW
SelectObject
Rectangle
CreateSolidBrush
DeleteObject
ole32
CoTaskMemFree
ReleaseStgMedium
StringFromCLSID
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ