Static task
static1
Behavioral task
behavioral1
Sample
694af778dddc83398b0923d8da141aac_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
694af778dddc83398b0923d8da141aac_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
694af778dddc83398b0923d8da141aac_JaffaCakes118
-
Size
113KB
-
MD5
694af778dddc83398b0923d8da141aac
-
SHA1
c99e75e09971cc7d349f0f278576122c6ac341eb
-
SHA256
6575335a502f3560eed28219b6d43a47559c48b98b8eb5a28442e346b8b79c86
-
SHA512
ff9a90dc22c426f8503e2247b766eeaf10e61ff7d342af1b7189132661b4a8ab5cd674ca23c348c9ceecd88a720d45cf3e6df5862151816813adf70f0325bc63
-
SSDEEP
3072:vs/NXn3+yFcAO1hTSWt6QsXPkoQGImV9GUoorgC:vsXn3+yVmSWcfPkojuoE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 694af778dddc83398b0923d8da141aac_JaffaCakes118
Files
-
694af778dddc83398b0923d8da141aac_JaffaCakes118.dll windows:4 windows x86 arch:x86
2a8ed6448baa79c5a10dab0dafda0dd4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FindCloseChangeNotification
CloseHandle
Sleep
WaitForMultipleObjects
FindNextChangeNotification
CreateEventW
ResumeThread
SetThreadPriority
CreateThread
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
SetProcessShutdownParameters
OpenEventW
TerminateProcess
SetUnhandledExceptionFilter
InterlockedExchange
LocalFree
UnhandledExceptionFilter
OutputDebugStringA
InterlockedIncrement
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcess
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
HeapAlloc
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
GetStringTypeW
SetHandleCount
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
SetEvent
LocalAlloc
GetCommandLineA
MultiByteToWideChar
VirtualProtect
GetEnvironmentVariableA
GetModuleFileNameA
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
user32
GetDesktopWindow
DestroyIcon
EndDialog
RegisterClassW
SendDlgItemMessageW
GetDlgItem
GetClientRect
SendMessageW
CheckDlgButton
SetForegroundWindow
GetWindowRect
GetWindowLongW
GetSystemMetrics
GetParent
PostMessageW
SetWindowPos
LoadStringW
SetDlgItemTextW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
LoadIconW
DefWindowProcW
DialogBoxParamW
SetTimer
KillTimer
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegNotifyChangeKeyValue
ole32
CoInitialize
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ