Static task
static1
Behavioral task
behavioral1
Sample
4dfcd493b309f6cf5004c603c0a08613_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4dfcd493b309f6cf5004c603c0a08613_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4dfcd493b309f6cf5004c603c0a08613_JaffaCakes118
-
Size
128KB
-
MD5
4dfcd493b309f6cf5004c603c0a08613
-
SHA1
37acdd10ad3e416f8ec309ac43f6f75fe6ceac4a
-
SHA256
65de369a5c19c5cd2375845435cb2b95a1b603b56947d1214ba30d7421e6ee07
-
SHA512
264f6bea9b78884a6257a2a137b90a7677706f284e65c5b966ace72266cbe82cb5e2b0b4d7345af31fef1c31ff2ce9c1dbe8e9ba58072a93355bfad15af31958
-
SSDEEP
3072:MaOW4LTZnXhZKTCSZF03bYRsWoIhTR24sZav/SUJ6QtQYHwxMomBKh1BI6T7:MHLTZXhZKTTAbA3oIhF2NZaHSCDQY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dfcd493b309f6cf5004c603c0a08613_JaffaCakes118
Files
-
4dfcd493b309f6cf5004c603c0a08613_JaffaCakes118.dll windows:4 windows x86 arch:x86
22cfccd61e9275ed40cbfe56e15b720f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InitializeCriticalSection
GetTickCount
SetLastError
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
GetCurrentDirectoryW
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
lstrcmpiW
GetLastError
LocalAlloc
LoadLibraryW
LocalFree
GetModuleHandleW
CreateActCtxW
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
QueryPerformanceCounter
GetModuleFileNameW
CreateFileA
FreeLibrary
InterlockedCompareExchange
InterlockedExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CloseHandle
GetExitCodeThread
SetEvent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
lstrlenW
GetProcAddress
WaitForSingleObject
GlobalFree
VirtualProtect
GlobalAlloc
CompareStringW
GetCommandLineA
user32
KillTimer
SetTimer
SystemParametersInfoW
SendDlgItemMessageW
SetWindowLongW
GetCaretBlinkTime
GetDlgItem
GetParent
InflateRect
GetSystemMetrics
EnableWindow
GetWindowRect
CheckDlgButton
EndDialog
SendMessageW
SetDoubleClickTime
LoadIconW
ShowCursor
SetCursor
SetDlgItemInt
CheckRadioButton
GetDlgItemInt
RegisterWindowMessageW
GetWindowLongW
GetWindowTextW
DestroyIcon
CopyIcon
SetCaretBlinkTime
CopyRect
ShowWindow
MessageBeep
LoadStringW
SetDlgItemTextW
CharNextW
MessageBoxW
GetFocus
DrawIconEx
MapWindowPoints
DrawFocusRect
DestroyCursor
GetDC
ReleaseDC
IsDlgButtonChecked
LoadCursorW
LoadImageW
GetSysColor
InvalidateRect
BeginPaint
EndPaint
PtInRect
SwapMouseButton
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueW
RegDeleteValueW
RegEnumValueW
RegSetValueExW
RegCreateKeyExW
gdi32
CreateCompatibleDC
GetDeviceCaps
GetObjectW
GetLayout
SetBkColor
SetDIBColorTable
BitBlt
SelectObject
DeleteDC
SetTextColor
ExtTextOutW
SetLayout
DeleteObject
rpcrt4
RpcBindingFromStringBindingW
RpcBindingSetAuthInfoExW
RpcBindingFree
RpcStringFreeW
RpcStringBindingComposeW
NdrClientCall2
msvcr71
_onexit
_lock
__dllonexit
_unlock
__CxxFrameHandler
_CxxThrowException
_vsnprintf
memset
free
wcsstr
memcpy
_wcsicmp
_adjust_fdiv
_amsg_exit
_XcptFilter
_vsnwprintf
_initterm
malloc
__CppXcptFilter
_except_handler3
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ