Static task
static1
Behavioral task
behavioral1
Sample
49a9986078856b4f10a5248a98ffe188_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49a9986078856b4f10a5248a98ffe188_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
49a9986078856b4f10a5248a98ffe188_JaffaCakes118
-
Size
293KB
-
MD5
49a9986078856b4f10a5248a98ffe188
-
SHA1
a1c254d6616ce58ffb80a3aaf13689a34725f3ea
-
SHA256
2cfc4d44a565de6fc3a82e7eac6fee33d6b77b123aff4ad17c57dbeda900bf04
-
SHA512
66aa005aa8c6cb2796db54f1d59aef4fd51f06dee9acdfd445530abb864a277fe5dc1a2a69abe2117bb12aa1f34ae0b6f20624e61330b0337188409e2cb1436f
-
SSDEEP
6144:KIGm1srWrjWp8NUBdu/yDH00mhigYjDOoFXz:rsrMjLws/2pm0HFj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49a9986078856b4f10a5248a98ffe188_JaffaCakes118
Files
-
49a9986078856b4f10a5248a98ffe188_JaffaCakes118.dll windows:4 windows x86 arch:x86
4908346e2c36db9b909f9512ae985e4a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
DrawIconEx
IsWindow
AppendMenuA
GetCursor
LoadCursorA
DialogBoxParamW
DrawTextA
EndDialog
CopyImage
DialogBoxParamA
GetDC
InsertMenuA
DrawIcon
DrawTextW
GetFocus
DrawTextA
DialogBoxParamA
AlignRects
DialogBoxParamW
GetMenu
CopyIcon
CopyRect
GetCursor
CreateIcon
DrawIconEx
GetDlgItem
AppendMenuW
GetWindowTextLengthA
CopyImage
AppendMenuA
CopyRect
IsWindow
AppendMenuW
DrawTextA
LoadCursorA
DialogBoxParamW
GetMenu
GetFocus
CopyImage
CopyIcon
CalcMenuBar
GetDlgItem
GetWindowTextA
advapi32
RegLoadKeyW
RegDeleteKeyW
RegReplaceKeyA
RegOpenKeyA
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyA
RegDeleteKeyA
RegEnumKeyW
RegFlushKey
RegLoadKeyA
comctl32
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_AddIcon
ImageList_Remove
ImageList_DragEnter
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Replace
ImageList_EndDrag
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_DrawIndirect
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_Merge
ImageList_Draw
ImageList_Destroy
ImageList_GetIcon
ImageList_DrawIndirect
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_LoadImage
ImageList_AddIcon
ImageList_Merge
ImageList_DragLeave
ImageList_Remove
ImageList_DragShowNolock
InitCommonControls
ImageList_GetImageCount
ImageList_Read
ImageList_Remove
ImageList_LoadImage
ImageList_GetImageRect
ImageList_Destroy
ImageList_DragLeave
ImageList_Draw
ImageList_Replace
ImageList_GetIcon
ImageList_AddMasked
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_GetImageInfo
InitCommonControls
ImageList_LoadImage
ImageList_DrawEx
ImageList_Draw
ImageList_GetImageInfo
InitCommonControls
ImageList_BeginDrag
ImageList_LoadImageW
ImageList_Copy
ImageList_Create
ImageList_AddIcon
ImageList_DrawIndirect
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Replace
ImageList_DragEnter
ImageList_LoadImageA
ImageList_Remove
ImageList_DragMove
kernel32
GetConsoleMode
GetCPInfo
CopyFileA
GlobalFree
GetComputerNameA
FindAtomA
GetCommandLineA
FindFirstFileA
GetFileTime
OpenFile
SetLastError
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bbs Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 1018B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ