winampGetGeneralPurposePlugin
Static task
static1
Behavioral task
behavioral1
Sample
6068397860e16441ec8ae44a8dbcb64d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6068397860e16441ec8ae44a8dbcb64d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6068397860e16441ec8ae44a8dbcb64d_JaffaCakes118
-
Size
576KB
-
MD5
6068397860e16441ec8ae44a8dbcb64d
-
SHA1
6c5df9420879e19aa440814e16167df70f25c173
-
SHA256
724cc1f90c809de7b92742a11b3a0b18b00b7ae69d858ecd17235c64e19d46e1
-
SHA512
5880488216dfa69c586481116664e1a7356317b8dd2e895fe4e94e37feffe6f189883f65cfe807a80d8a88ca2902f29227e2411132241bb43ff0823cf85ac0b9
-
SSDEEP
12288:gPaKLccEA3GLG0ewmEHFb8A4QIAkhv17kCmKmpvY:Bg2K0yEN8A4Qq517Hmx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6068397860e16441ec8ae44a8dbcb64d_JaffaCakes118
Files
-
6068397860e16441ec8ae44a8dbcb64d_JaffaCakes118.dll windows:4 windows x86 arch:x86
decffdd41d31e584b91ad8a7e312dd21
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comctl32
ImageList_Create
ImageList_Replace
ord17
InitCommonControlsEx
ImageList_Add
ImageList_Destroy
shlwapi
PathFindExtensionA
PathCombineA
kernel32
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
lstrcpyA
GetFullPathNameA
DeleteFileA
GetCurrentThreadId
GetCurrentProcessId
GetDriveTypeA
GetLogicalDrives
GlobalReAlloc
GetThreadLocale
lstrcpynW
LocalFree
LocalAlloc
WaitForSingleObject
CreateThread
GetModuleHandleA
SetCurrentDirectoryA
SetEvent
ExitThread
WaitForMultipleObjects
lstrcmpW
ResetEvent
ResumeThread
SetThreadPriority
CreateEventA
CopyFileA
OutputDebugStringA
MoveFileA
ReadFile
WriteFile
GetLocaleInfoA
GetACP
InterlockedExchange
GetSystemTime
lstrlenW
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetVersion
MulDiv
WideCharToMultiByte
CreateDirectoryA
Sleep
GlobalAlloc
GetCurrentDirectoryA
GetVolumeInformationA
lstrcmpA
lstrcmpiA
lstrlenA
lstrcatA
GetTempPathA
GetTempFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalFree
FindNextFileA
GetTickCount
CreateFileA
GetFileTime
GetFileSize
GetLastError
CloseHandle
EnterCriticalSection
LeaveCriticalSection
FindFirstFileA
FindClose
lstrcpynA
DisableThreadLibraryCalls
ExitProcess
QueryPerformanceCounter
GetModuleFileNameA
GetSystemTimeAsFileTime
user32
DispatchMessageA
DestroyWindow
FindWindowExA
GetWindowTextA
IsDlgButtonChecked
GetDlgItem
ShowWindow
CheckDlgButton
GetDlgItemTextA
DrawTextA
MessageBoxA
LoadImageA
SetWindowLongA
GetWindowLongA
BeginPaint
RemovePropA
EndPaint
CallWindowProcA
GetDC
ReleaseDC
SetRect
PostMessageA
DialogBoxParamA
SetDlgItemTextA
SendDlgItemMessageA
wsprintfA
KillTimer
EndDialog
TranslateMessage
GetMessageA
GetScrollPos
SetWindowTextA
SetTimer
SendMessageA
CreateDialogParamA
IsWindow
GetParent
IsWindowVisible
ScreenToClient
ClientToScreen
ReleaseCapture
GetCapture
CheckMenuItem
PtInRect
MapWindowPoints
CopyRect
GetWindowDC
OffsetRect
GetSysColor
CreateWindowExA
DefWindowProcA
SetWindowTextW
LockWindowUpdate
CharPrevA
GetPropA
SetScrollInfo
ShowScrollBar
GetScrollInfo
SetScrollPos
GetWindow
RegisterWindowMessageA
InsertMenuItemA
SetWindowsHookExA
RemoveMenu
DestroyMenu
GetMenuItemCount
InsertMenuA
GetWindowRect
LoadMenuA
SetFocus
UpdateWindow
GetMessagePos
GetSystemMetrics
CallNextHookEx
UnhookWindowsHookEx
GetForegroundWindow
WindowFromPoint
IsChild
GetWindowThreadProcessId
GetClassNameA
SetForegroundWindow
LoadCursorA
SetCursor
SubtractRect
GetDlgCtrlID
GetWindowTextW
DrawTextW
IntersectRect
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
IsWindowEnabled
CharUpperA
InflateRect
GetFocus
DrawFocusRect
CharNextW
GetUpdateRect
FillRect
InvalidateRect
EnumChildWindows
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
InvalidateRgn
EnableWindow
GetDlgItemInt
SetDlgItemInt
SetWindowPos
CharNextA
GetClientRect
GetAsyncKeyState
GetSubMenu
GetCursorPos
TrackPopupMenu
PeekMessageA
EnableMenuItem
GetMenuItemInfoA
DeleteMenu
SetPropA
GetNextDlgTabItem
ValidateRect
SetCapture
RegisterClassA
gdi32
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
StretchBlt
LineTo
MoveToEx
CreatePen
SetTextColor
CombineRgn
CreateRectRgn
CreateSolidBrush
SetBkMode
SelectClipRgn
BitBlt
GetPixel
CreateBitmap
CreateDIBSection
CreateFontW
GetDeviceCaps
CreateBrushIndirect
GetClipRgn
CreateRectRgnIndirect
GetNearestColor
SetStretchBltMode
FillRgn
CreateFontA
PatBlt
SetBrushOrgEx
UnrealizeObject
CreatePatternBrush
ExtTextOutA
Rectangle
GetStockObject
GetTextMetricsA
GetObjectA
DeleteDC
SetBkColor
DeleteObject
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
SHGetMalloc
DragQueryPoint
SHFileOperationA
SHBrowseForFolderA
SHGetPathFromIDListA
DragQueryFileA
DragFinish
ShellExecuteA
ole32
OleRun
CoInitialize
CLSIDFromString
CoCreateInstance
CoCreateGuid
oleaut32
SysAllocStringLen
VariantInit
GetErrorInfo
SysFreeString
msvcr71
_stricmp
__CppXcptFilter
_adjust_fdiv
_initterm
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
fread
fwrite
mktime
memmove
getc
_splitpath
_makepath
fputs
isalpha
strftime
strtoul
_strlwr
calloc
isspace
qsort
wcscmp
rand
fseek
ftell
fgets
strncmp
wcstombs
_except_handler3
_CxxThrowException
strncpy
strchr
localtime
_vsnprintf
_vsnwprintf
sprintf
_wtoi
islower
isupper
tolower
??2@YAPAXI@Z
??3@YAXPAX@Z
_snprintf
strcat
fopen
fprintf
fclose
memcmp
toupper
memset
strlen
malloc
realloc
__CxxFrameHandler
atoi
strcpy
free
time
strstr
strcmp
memcpy
_unlink
_strnicmp
_wcsdup
_access
_strcmpi
_mkdir
__security_error_handler
_strdup
Exports
Exports
Sections
.text Size: 247KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 198KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ