DS_Entry
Static task
static1
Behavioral task
behavioral1
Sample
5c60aa76ed3115930ba9ef4303e10d34_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5c60aa76ed3115930ba9ef4303e10d34_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5c60aa76ed3115930ba9ef4303e10d34_JaffaCakes118
-
Size
2.8MB
-
MD5
5c60aa76ed3115930ba9ef4303e10d34
-
SHA1
36d0488684a56daf4fda9dff1113533f6b1e053e
-
SHA256
c1be4fd2f09fd3559503c577823290b7f190647c7d7040b6466e9edae13da490
-
SHA512
99022bfd6d8901dab556aa287bf94a7924dfd58dd46c10986f9361ff035b8b689af0bbf88ef4c33c60e498743f118b4383dfd9bdd2ba8326ac4eb794c293f75a
-
SSDEEP
49152:78Ege2KGEf2qfyYu434fl5kdp2auKR1FMxLRIY+C4E0Vn9HfuuKtyKVOOzasfPgB:78Eg0Df3ym4dKdp2+TcLRIY+C4E015un
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c60aa76ed3115930ba9ef4303e10d34_JaffaCakes118
Files
-
5c60aa76ed3115930ba9ef4303e10d34_JaffaCakes118.dll windows:4 windows x86 arch:x86
1af4b77ed06d0ae1c1430a46a0cac4dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
twain_32
ord1
mscms
GetColorDirectoryA
kernel32
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
FindNextFileA
GetTimeZoneInformation
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
GetACP
ExitProcess
TerminateProcess
ExitThread
HeapSize
HeapReAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
IsBadWritePtr
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalFlags
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
TlsAlloc
LocalAlloc
SuspendThread
ResumeThread
GetCurrentThread
WaitForSingleObject
ReleaseMutex
CreateMutexA
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
LocalFree
lstrcpynA
MulDiv
SetLastError
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
LockResource
FindResourceA
LoadResource
_lopen
_lread
GlobalHandle
GetCurrentThreadId
VirtualAlloc
VirtualFree
GetSystemTime
GetDiskFreeSpaceA
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
_lclose
OpenFile
DeleteFileA
Sleep
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
TerminateThread
CreateThread
SetThreadPriority
GetPrivateProfileIntA
OpenEventA
CreateEventA
GetLocalTime
WinExec
lstrlenA
lstrcmpiA
CopyFileA
Beep
GetVersionExA
GetSystemDirectoryA
lstrcatA
lstrcmpA
GetLastError
GetWindowsDirectoryA
GetSystemDefaultLangID
CreateDirectoryA
GetDiskFreeSpaceExA
GlobalUnlock
GlobalFree
lstrcpyA
GetCurrentDirectoryA
SetCurrentDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
_llseek
GlobalLock
GlobalAlloc
CloseHandle
GetStartupInfoA
GetDriveTypeA
user32
AdjustWindowRectEx
SetFocus
DispatchMessageA
SendDlgItemMessageA
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
ShowWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
DestroyMenu
wvsprintfA
WindowFromPoint
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
UnregisterClassA
GetClassNameA
GetSysColorBrush
IsWindowVisible
ScrollWindow
GetScrollInfo
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
MapWindowPoints
GetMenuItemID
LoadIconA
DrawMenuBar
SetMenu
PostMessageA
GetMenuState
IsWindow
TrackPopupMenu
GetFocus
MoveWindow
GetKeyState
GetWindow
GetDesktopWindow
ClientToScreen
GetForegroundWindow
MessageBeep
IntersectRect
EnableScrollBar
ShowScrollBar
CharLowerA
GetActiveWindow
IsRectEmpty
LoadMenuA
ModifyMenuA
GetSubMenu
RemoveMenu
GetMenuItemCount
FrameRect
SetRectEmpty
DeleteMenu
KillTimer
SetTimer
ScreenToClient
GetCursorPos
EqualRect
SetCursor
ClipCursor
InflateRect
EnableMenuItem
ReleaseCapture
SetCapture
SetRect
BringWindowToTop
GetClientRect
wsprintfA
LoadCursorA
GetClassLongA
SetClassLongA
ReleaseDC
PeekMessageA
SetForegroundWindow
MessageBoxA
PtInRect
GetDC
InsertMenuA
GetMenuStringA
DrawTextA
GetSysColor
EnableWindow
GetWindowRect
GetParent
OffsetRect
LoadBitmapA
FillRect
UpdateWindow
InvalidateRect
CheckMenuItem
AppendMenuA
CreatePopupMenu
CharUpperA
SetScrollRange
SetScrollPos
GetScrollPos
RedrawWindow
LoadStringA
CopyRect
GetSystemMetrics
SendMessageA
GetMenu
gdi32
GetPixel
SetPixel
GetTextMetricsA
CreateRectRgnIndirect
PtInRegion
CreatePolygonRgn
SetRectRgn
Polygon
GetStockObject
Ellipse
CreateEllipticRgnIndirect
Arc
SetBkColor
SetMapMode
SelectObject
GetTextExtentPoint32A
FloodFill
GetTextColor
SetDIBitsToDevice
CreateDIBitmap
CreatePalette
SetPaletteEntries
GetClipBox
SetTextColor
SaveDC
RestoreDC
SetBkMode
SetROP2
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
CreateSolidBrush
ScaleViewportExtEx
SetWindowOrgEx
CreateRectRgn
ScaleWindowExtEx
SelectClipRgn
MoveToEx
LineTo
SetTextAlign
PtVisible
RectVisible
Escape
DeleteObject
GetTextExtentPointA
GetICMProfileA
StartDocA
StartPage
TextOutA
EndPage
EndDoc
ExtTextOutA
BitBlt
DPtoLP
CreatePen
CreateFontIndirectA
CreateICA
GetMapMode
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
GetObjectA
GetDeviceCaps
SetWindowExtEx
DeleteDC
Rectangle
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegEnumValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
comctl32
ord17
ImageList_Destroy
Exports
Exports
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 708KB - Virtual size: 705KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ