Static task
static1
Behavioral task
behavioral1
Sample
5d40805237c83c85ea0b5e09fc46504f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d40805237c83c85ea0b5e09fc46504f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5d40805237c83c85ea0b5e09fc46504f_JaffaCakes118
-
Size
120KB
-
MD5
5d40805237c83c85ea0b5e09fc46504f
-
SHA1
874506de1a543c05f40d93b17053b301319a9d3b
-
SHA256
ba69a269949d25f70cdc45fbd90fccc06a76417e5cb950e0386374cb84119f95
-
SHA512
4a9d6889e29af080c411f7f2a428cfbb9388558474de9823c4f1e457abbbba84e59e53e568adba24342192057b325cdd6a5b8b499c9d7010e201f7d26bb682b0
-
SSDEEP
3072:OsrToelg7lodn2dU5u1CfuyGy+vSrKUgwXgL:OPesnDUVY9UgwQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d40805237c83c85ea0b5e09fc46504f_JaffaCakes118
Files
-
5d40805237c83c85ea0b5e09fc46504f_JaffaCakes118.dll windows:4 windows x86 arch:x86
f44ac59d7685831bc43113aef7e3f09b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
GetSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeFormatW
GetDateFormatW
GetModuleHandleW
FormatMessageW
InterlockedExchange
SetUnhandledExceptionFilter
LocalFree
WriteFile
lstrlenW
UnhandledExceptionFilter
TerminateProcess
InitializeCriticalSectionAndSpinCount
Sleep
GetStdHandle
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
HeapAlloc
GetEnvironmentStringsW
WriteConsoleW
GetCurrentProcess
VirtualProtect
InterlockedDecrement
GetFileAttributesW
CreateFileW
SetFilePointer
DisableThreadLibraryCalls
GetCommandLineA
InterlockedCompareExchange
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetStringTypeW
user32
SendMessageW
GetWindowLongW
GetDlgItem
LoadStringW
GetDlgCtrlID
SendDlgItemMessageW
SetWindowLongW
InvalidateRect
SetFocus
EnableWindow
SetDlgItemTextW
WinHelpW
EndDialog
advapi32
RegQueryValueExW
ReportEventA
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
ole32
CoUninitialize
CoInitialize
CoTaskMemFree
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ