zhxi
Static task
static1
Behavioral task
behavioral1
Sample
5f590bacedfef06fa0d2edd04f93d1cf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f590bacedfef06fa0d2edd04f93d1cf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5f590bacedfef06fa0d2edd04f93d1cf_JaffaCakes118
-
Size
120KB
-
MD5
5f590bacedfef06fa0d2edd04f93d1cf
-
SHA1
9412af88fb9ffd05876acb1a2d3fcdff023672a3
-
SHA256
00fbc327c30cd105285e4aa2b2b81b9525277f6f946c7e4cd300f73c75b725f2
-
SHA512
dc92e018f336f5ef22e93aef0c5663c411647d98e6c10a4fb3326e7a35d1410c94a20fea34022a6e4067d591fd403b7825d9e80661a20f0d245f6b2d41f9a945
-
SSDEEP
1536:6xCHeiEfmZ872KuGjv/xpxmF39BNuo2H2SnT3hzzBqem:6xCVEfy872KVzxpxmF39dKxhzzBqe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f590bacedfef06fa0d2edd04f93d1cf_JaffaCakes118
Files
-
5f590bacedfef06fa0d2edd04f93d1cf_JaffaCakes118.dll windows:4 windows x86 arch:x86
854b7b596be1977aa63c1748212176e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileA
MoveFileWithProgressA
FillConsoleOutputCharacterA
ReadConsoleInputA
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
ExitProcess
user32
EnumDisplaySettingsW
LoadIconW
GetForegroundWindow
GetFocus
SetFocus
SetSysColors
SwapMouseButton
SetCaretBlinkTime
KillTimer
SetTimer
SendMessageTimeoutW
FindWindowW
GetWindowRect
MapWindowPoints
SetWindowPos
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
SendDlgItemMessageW
SetDlgItemTextW
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
GetDesktopWindow
SystemParametersInfoW
GetWindow
GetDlgCtrlID
GetTopWindow
GetClientRect
HiliteMenuItem
EnableMenuItem
LoadMenuW
OffsetRect
InflateRect
GetSystemMetrics
FillRect
DrawFrameControl
DestroyIcon
DrawTextW
DrawEdge
LoadImageW
InvalidateRect
DefWindowProcW
EndPaint
BeginPaint
GetSysColor
RegisterClassW
LoadCursorW
PostMessageW
GetParent
SetWindowTextW
EnableWindow
ChangeDisplaySettingsW
advapi32
RegCreateKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyA
RegSetValueExA
RegEnumValueA
RegCreateKeyA
RegOpenKeyA
RegOpenKeyExA
RegOpenKeyExW
gdi32
PatBlt
GetTextColor
RealizePalette
ExtTextOutW
BitBlt
CreateCompatibleBitmap
SetLayout
SelectObject
DeleteObject
RestoreDC
SelectPalette
SetTextColor
SetBkMode
CreatePalette
CreateBitmap
CreateCompatibleDC
GetTextMetricsW
DeleteDC
SetTextAlign
Rectangle
GetTextExtentPoint32W
SaveDC
CreateSolidBrush
SetPaletteEntries
GetStockObject
GetNearestColor
GetNearestPaletteIndex
GetPaletteEntries
GetDeviceCaps
CreateFontIndirectW
TextOutW
SetBkColor
Exports
Exports
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 614B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ