Static task
static1
Behavioral task
behavioral1
Sample
6773c00ad533799a8b0dc18c2ce129d8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6773c00ad533799a8b0dc18c2ce129d8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6773c00ad533799a8b0dc18c2ce129d8_JaffaCakes118
-
Size
92KB
-
MD5
6773c00ad533799a8b0dc18c2ce129d8
-
SHA1
a6430b8f7d46037b58bacca3ddba930890f6acf6
-
SHA256
cf81ea1b5281cb24f41386f79027a3a5d4b0b37b688fba0d59434c04f1c9cf33
-
SHA512
3bd336533e50134b94d888b2941a5182c2508732e7b9080ccde3d1543ddb8ee7874a2017995a6c08e5059243f133a90054a53fdc924f813c671a75cc40ecb992
-
SSDEEP
1536:Nym+38WF+XK9To0j7+WSlO13JT6wTH0gtXOWuaNKH9yG7KkeW7Yx/Fm3xO7RaU:BmPpolWN13Z5TUgtXKRH9yaN4XmsRd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6773c00ad533799a8b0dc18c2ce129d8_JaffaCakes118
Files
-
6773c00ad533799a8b0dc18c2ce129d8_JaffaCakes118.dll windows:4 windows x86 arch:x86
8fba4ddcb248a65db63666555a1c9dbb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comdlg32
ChooseColorA
ChooseColorW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
dwOKSubclass
WantArrows
GetOpenFileNameA
GetOpenFileNameW
LoadAlterBitmap
PrintDlgA
ReplaceTextW
user32
DialogBoxParamA
EnumWindows
GetDesktopWindow
GetUserObjectSecurity
ScreenToClient
SendMessageA
kernel32
HeapCreate
GetDevicePowerState
GetCommandLineA
GetACP
ExpandEnvironmentStringsA
ExitProcess
EnumSystemLocalesW
EnumLanguageGroupLocalesW
CreateWaitableTimerW
CloseHandle
CallNamedPipeW
GetModuleHandleA
SetSystemPowerState
SetComputerNameA
RtlMoveMemory
LCMapStringA
GetStartupInfoA
HeapAlloc
GetVersionExA
GetLogicalDrives
ole32
StringFromGUID2
CoCreateInstance
CLSIDFromString
dbghelp
FindDebugInfoFileEx
ImageNtHeader
ImageRvaToVa
MapDebugInformation
SymEnumSourceFiles
SymFromAddr
SymGetLineFromAddr64
SymGetLinePrev64
SymGetSymFromAddr
SymGetSymPrev
SymGetTypeFromName
SymMatchString
SymSetOptions
UnmapDebugInformation
ImageDirectoryEntryToData
comctl32
CreateStatusWindowA
DestroyPropertySheetPage
DrawInsert
FlatSB_SetScrollInfo
ImageList_DrawEx
ImageList_GetBkColor
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_Merge
ImageList_SetFilter
UninitializeFlatSB
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ