EnumRelCamSettingDataNext
Static task
static1
Behavioral task
behavioral1
Sample
64ad02d58b628f4b1c4701c2d4548b40_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
64ad02d58b628f4b1c4701c2d4548b40_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
64ad02d58b628f4b1c4701c2d4548b40_JaffaCakes118
-
Size
196KB
-
MD5
64ad02d58b628f4b1c4701c2d4548b40
-
SHA1
14a1e0cd7352a6c1b7dcebecf4404c0e227e71b1
-
SHA256
74350a59e8a4786eb515613f6bbc92e8dc8c79f41d09474700535db3542fbc1f
-
SHA512
548093bd3d3f74101668493d91fca2e61db6a8cf8fc72baf640c9b499abae75985f09c0ab133f874f24abbaccb5ffb5533276c635c3724a7a603cd8abaa010c5
-
SSDEEP
6144:oJnYj6OpHa6Uy/MtB0hz9fG4/ddnygPuvV:oFG6iHZv0tChz9Ty+ud
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64ad02d58b628f4b1c4701c2d4548b40_JaffaCakes118
Files
-
64ad02d58b628f4b1c4701c2d4548b40_JaffaCakes118.dll windows:4 windows x86 arch:x86
5b405d33d3bddf33217f5b18ec936b89
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateConsoleScreenBuffer
DisableThreadLibraryCalls
ExitProcess
FatalAppExitA
FileTimeToSystemTime
FindFirstFileA
FreeEnvironmentStringsA
GetACP
GetCommandLineA
GetConsoleCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetEnvironmentVariableA
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersionExA
GlobalAddAtomA
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
IsValidCodePage
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
ReadFile
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
VirtualAlloc
user32
LoadImageA
ScrollWindowEx
LoadIconA
SetCursor
TranslateAcceleratorA
IsDialogMessageA
InvalidateRgn
GetKeyState
FindWindowA
EnableMenuItem
DrawTextA
DrawIconEx
DrawFrameControl
DrawEdge
DispatchMessageA
DefWindowProcA
SendMessageA
CreateIconIndirect
advapi32
GetSidLengthRequired
LsaOpenPolicySce
PrivilegedServiceAuditAlarmA
SetKernelObjectSecurity
FileEncryptionStatusW
ddraw
DirectDrawEnumerateExA
DirectDrawCreate
ole32
CoCreateInstance
CoBuildVersion
IsEqualGUID
Exports
Exports
Sections
.text Size: 129KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ