Static task
static1
Behavioral task
behavioral1
Sample
487aaf318c9eed5ce58b703ed3afa7b8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
487aaf318c9eed5ce58b703ed3afa7b8_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
487aaf318c9eed5ce58b703ed3afa7b8_JaffaCakes118
-
Size
114KB
-
MD5
487aaf318c9eed5ce58b703ed3afa7b8
-
SHA1
748439632470d3841c7da64b0ef390fc5a7da23f
-
SHA256
5da97c9d73b561359be996f137e1de84438fb8406e0c9b41ef5a4173cff9bd79
-
SHA512
c9fe06e9e344d68e162e63792f71cfb29d009902f1c3e70fa3e81c5de844d64ec5192262875cb7fd117a87c8345ecfd867a9e31e524b280fd490e6e794a234b3
-
SSDEEP
3072:GrGsRPEVx36URhvXp7ewH+N5/O8FV72eg:lGURdI9m8FVS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 487aaf318c9eed5ce58b703ed3afa7b8_JaffaCakes118
Files
-
487aaf318c9eed5ce58b703ed3afa7b8_JaffaCakes118.dll windows:4 windows x86 arch:x86
410e36092dee8b7c1a5f607824baae1a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapFree
SetMailslotInfo
CloseConsoleHandle
DeleteFiber
WriteConsoleInputW
SetEnvironmentVariableW
GetDefaultCommConfigA
EnumResourceNamesW
LocalShrink
IsBadReadPtr
FreeEnvironmentStringsW
GetQueuedCompletionStatus
GetTempPathW
GetCurrentDirectoryA
SwitchToThread
SetCommTimeouts
ExpungeConsoleCommandHistoryW
FlushConsoleInputBuffer
GetNextVDMCommand
AllocConsole
FillConsoleOutputAttribute
SetLastError
GetBinaryTypeW
CloseHandle
WaitCommEvent
WritePrivateProfileStructW
BackupRead
GetNumberFormatW
SetConsoleHardwareState
MapViewOfFile
GetCurrentThreadId
SetThreadLocale
VirtualLock
AddAtomA
GetEnvironmentStringsW
GetComputerNameW
TlsSetValue
SetConsoleOutputCP
VirtualAlloc
ConsoleMenuControl
GetThreadPriorityBoost
user32
CreateAcceleratorTableW
DrawStateA
IsDialogMessageA
SetMenuItemInfoA
SwapMouseButton
LoadStringW
GetClassInfoA
DefFrameProcA
RemovePropW
GetDlgItem
CharLowerA
LoadCursorFromFileW
SetCursor
GetDCEx
MB_GetString
ReleaseCapture
GetThreadDesktop
BroadcastSystemMessageA
wsprintfW
UserRealizePalette
OemToCharW
GetSubMenu
GetMessageTime
ChangeMenuW
IsDialogMessage
DrawTextExA
TabbedTextOutW
LoadImageA
CreateWindowExA
SetRect
ScrollWindowEx
SetConsoleReserveKeys
CharUpperA
ChildWindowFromPoint
InvalidateRgn
CharNextW
GetWindowTextLengthA
GetSystemMenu
CopyIcon
gdi32
CreateHatchBrush
GdiIsMetaPrintDC
SetRelAbs
AddFontResourceW
CreateSolidBrush
StretchDIBits
GetStockObject
RemoveFontResourceTracking
GetTextExtentPoint32W
GetCharWidthFloatA
SelectBrushLocal
SetBoundsRect
GdiGetCodePage
SetPixelV
GetKerningPairs
GetTextCharset
GetEnhMetaFileDescriptionW
GdiQueryFonts
GdiGetBatchLimit
GdiProcessSetup
SelectPalette
Escape
EndDoc
GdiConvertDC
Polyline
CreateEnhMetaFileA
TextOutW
AngleArc
DeleteObject
CreateDIBPatternBrush
SetDIBitsToDevice
GdiValidateHandle
GetMapMode
GetSystemPaletteEntries
AbortDoc
GetViewportOrgEx
SetDeviceGammaRamp
CreatePolyPolygonRgn
ole32
STGMEDIUM_UserUnmarshal
MkParseDisplayName
CoCreateInstanceEx
CoGetTreatAsClass
CoFreeLibrary
RegisterDragDrop
CoUninitialize
StringFromIID
OleRegGetMiscStatus
StgSetTimes
UtConvertDvtd32toDvtd16
CoFreeUnusedLibraries
ReadClassStg
CoGetPSClsid
SNB_UserSize
CoSetProxyBlanket
OleGetAutoConvert
IIDFromString
HBRUSH_UserFree
GetConvertStg
CoCopyProxy
CLIPFORMAT_UserMarshal
OleCreateLinkToFileEx
CoRegisterPSClsid
Sections
.idata Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 71KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ