Static task
static1
Behavioral task
behavioral1
Sample
6186dc1142016bc92d3f1f5f931f56dc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6186dc1142016bc92d3f1f5f931f56dc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6186dc1142016bc92d3f1f5f931f56dc_JaffaCakes118
-
Size
112KB
-
MD5
6186dc1142016bc92d3f1f5f931f56dc
-
SHA1
5b7cfaf725a37cc603047022b14b11c7b56ee148
-
SHA256
1358dbaa7afba05d36c3725aed755856228829f99d00c9ea9e17bf03c56c4aa5
-
SHA512
44486482e521d9eaf28b2d300eeaa61fcb62a3e3d77862de2536ee9b40186c793d70f522163a838be0598f002fe4205356d8fc487ceea74f93a7f98f0f690926
-
SSDEEP
3072:t0nBnUpsiAFR6DB30Yp9DNNNOg0JsObqEzqJm0Jk:tmBn+3A380Yp9J2g3o7z2J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6186dc1142016bc92d3f1f5f931f56dc_JaffaCakes118
Files
-
6186dc1142016bc92d3f1f5f931f56dc_JaffaCakes118.dll windows:4 windows x86 arch:x86
2066902e08801b1db43195130d67b873
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
winmm
timeSetEvent
waveInGetDevCapsA
waveInGetDevCapsW
waveInPrepareHeader
waveInStart
waveInUnprepareHeader
waveOutGetDevCapsA
waveOutGetNumDevs
waveOutGetPosition
waveOutUnprepareHeader
mciSendCommandA
ole32
CoInitialize
CoTaskMemFree
CoCreateInstance
dinput
DirectInputCreateW
ws2_32
accept
socket
send
WSAAsyncGetHostByName
WSACancelAsyncRequest
WSACleanup
WSAStartup
closesocket
recv
select
advapi32
GetAce
SetSecurityDescriptorDacl
SetFileSecurityW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
OpenProcessToken
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
GetSecurityDescriptorDacl
GetLengthSid
GetAclInformation
EqualSid
AllocateAndInitializeSid
AddAce
AddAccessAllowedAce
user32
MessageBoxW
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageA
PostThreadMessageA
RegisterClassA
RegisterWindowMessageA
ReleaseDC
ScreenToClient
SetClipboardData
SetRect
SetWindowPos
ShowCursor
ShowWindow
TranslateMessage
UpdateWindow
wsprintfA
LoadIconA
LoadCursorA
GetSystemMetrics
GetQueueStatus
GetForegroundWindow
GetDC
GetClipboardData
EmptyClipboard
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
CloseClipboard
ClientToScreen
CharToOemA
AdjustWindowRect
CharLowerBuffA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
HeapCreate
HeapAlloc
IsValidCodePage
InterlockedExchange
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetSystemDirectoryA
IsValidLocale
GetUserDefaultLangID
IsDebuggerPresent
LeaveCriticalSection
GetEnvironmentStringsW
MulDiv
ResumeThread
SetCurrentDirectoryA
SetEvent
SetHandleCount
SetUnhandledExceptionFilter
TerminateProcess
TlsFree
TlsGetValue
WideCharToMultiByte
GetFileInformationByHandle
GetLocaleInfoW
GetModuleHandleA
GetVersionExA
GetDateFormatA
AreFileApisANSI
GetConsoleOutputCP
GetCommandLineA
GetACP
FreeEnvironmentStringsA
FlushFileBuffers
FindFirstFileA
ExitProcess
DeviceIoControl
CreateEventA
CreateDirectoryA
GetModuleHandleW
shell32
SHGetSpecialFolderPathW
ShellExecuteA
SHFileOperationW
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ