?_GetClipCursor@@YGPAXPADPAI@Z
Static task
static1
Behavioral task
behavioral1
Sample
4daa397e6547920a9e339b7e98c0cf8b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4daa397e6547920a9e339b7e98c0cf8b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4daa397e6547920a9e339b7e98c0cf8b_JaffaCakes118
-
Size
87KB
-
MD5
4daa397e6547920a9e339b7e98c0cf8b
-
SHA1
71af5f21323a24371b64b9a1181848b3c204f80b
-
SHA256
4295b00f8a5f4c3df36bbe1826a4b52d1a81a0ded607305462fd160417807d04
-
SHA512
3ab3964adfb015c5736d41d5259f75a0e2c21f5ba117f990b90208b5a29bffc0b48c3132c98249949c3e97ad1217d97f4dcc03ac815b472766c4b61da4dbb6b6
-
SSDEEP
1536:RgHIUNLdN85BRWTfqcUBWtndYs/8JJHa+lpGeLiSnTYFK:uNLd2Y3gsUJd5tTYF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4daa397e6547920a9e339b7e98c0cf8b_JaffaCakes118
Files
-
4daa397e6547920a9e339b7e98c0cf8b_JaffaCakes118.dll windows:5 windows x86 arch:x86
01122ca2a3d28a617e035fc10d3a4237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
StrCmpNIA
StrPBrkA
PathBuildRootW
ChrCmpIW
ord157
PathFindFileNameW
shell32
SHCreateQueryCancelAutoPlayMoniker
kernel32
GetCommConfig
SearchPathA
FileTimeToDosDateTime
GlobalSize
CreateJobObjectW
EscapeCommFunction
SetCommState
LoadLibraryExW
GetDllDirectoryA
SetStdHandle
CreateFileMappingW
EraseTape
CloseHandle
lstrcpyA
SetWaitableTimer
CreateWaitableTimerA
LoadLibraryExA
CreateEventW
PeekNamedPipe
lstrcatA
GlobalFindAtomA
user32
GetMenuStringW
CreateDesktopA
DefDlgProcW
HideCaret
SendNotifyMessageW
ArrangeIconicWindows
CreateMenu
SetScrollRange
SetPropW
GetKeyboardLayoutNameW
SetWindowContextHelpId
SetLastErrorEx
CreateIcon
SendMessageCallbackW
CheckDlgButton
SetMenu
UnhookWindowsHookEx
SetWindowTextW
GetScrollPos
CallWindowProcW
CheckMenuRadioItem
SetCaretPos
gdi32
Polygon
CreateEnhMetaFileA
CreateDiscardableBitmap
GetStretchBltMode
GetEnhMetaFileHeader
SetTextCharacterExtra
GetMetaRgn
GetPaletteEntries
CreateFontIndirectW
SelectClipRgn
FixBrushOrgEx
FlattenPath
advapi32
AddAccessDeniedAce
AddAuditAccessObjectAce
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MData Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ICode Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MConst Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NData Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 854B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ