Static task
static1
Behavioral task
behavioral1
Sample
679b2218e6c2c7b12e0207087fa901fe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
679b2218e6c2c7b12e0207087fa901fe_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
679b2218e6c2c7b12e0207087fa901fe_JaffaCakes118
-
Size
516KB
-
MD5
679b2218e6c2c7b12e0207087fa901fe
-
SHA1
731570f6ea36818f615fdcdae5dcb3d6b3fbc4aa
-
SHA256
c6721614d45b5df817686e54cabcf8ad86c595a5e9b1dd462a317948e2b35339
-
SHA512
367181964fb34458ff3a6b348033c42fa4a3e6556ebd76191a881fbe51beea822d0ca8ca3845db11e408801bf0e24169f2bf669a237b0974a7367ca7ffd4cdc1
-
SSDEEP
6144:/p/zrkkTH7UY8RRY/pxhWEchEaraQeeaQeeCQeesQeetjQeehQeeQLwnpB/OYVsp:/1zrnb7UYcRCpn9kywbCR+hP3XpVo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 679b2218e6c2c7b12e0207087fa901fe_JaffaCakes118
Files
-
679b2218e6c2c7b12e0207087fa901fe_JaffaCakes118.dll windows:5 windows x86 arch:x86
9ccfd0b8a487384371df58b5df760a1f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
MultiByteToWideChar
CreateThread
VirtualProtect
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
DisableThreadLibraryCalls
VirtualAlloc
IsBadWritePtr
MulDiv
Beep
Sleep
IsBadReadPtr
GetCurrentProcess
ExitProcess
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
GetSystemInfo
OutputDebugStringA
VirtualFree
GetProcAddress
WideCharToMultiByte
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
user32
DefWindowProcA
ReleaseDC
MessageBoxA
GetForegroundWindow
GetDesktopWindow
RegisterClassExA
DestroyWindow
GetSystemMetrics
mouse_event
GetDC
GetAsyncKeyState
CreateWindowExA
gdi32
DeleteDC
CreateDIBSection
CreateFontA
GetDeviceCaps
SetBkColor
DeleteObject
SetTextColor
CreateCompatibleDC
SetMapMode
SetTextAlign
GetPixel
ExtTextOutA
GetObjectW
GetTextMetricsA
GetTextExtentPoint32A
SelectObject
CreateFontIndirectA
ExtTextOutW
MoveToEx
CreateFontIndirectW
GetObjectA
GetFontLanguageInfo
GetTextMetricsW
SetBkMode
GetCharacterPlacementW
GetCharacterPlacementA
GetGlyphOutlineA
shell32
ShellExecuteA
d3d9
Direct3DCreate9
msvcr90
__CxxFrameHandler3
memset
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
strcpy_s
??2@YAPAXI@Z
_time64
_localtime64
??3@YAXPAX@Z
system
malloc
free
ceil
_mbsnbcpy
vsprintf
sprintf
tmpfile
fclose
fwrite
fseek
fread
exit
_CIpow
_ftol
strncpy
_CIacos
_finite
iswpunct
iswdigit
iswalpha
iswspace
modf
longjmp
_setjmp3
isdigit
isspace
sscanf
ldexp
_strdup
setlocale
floor
__CxxFrameHandler
wininet
InternetOpenA
InternetOpenUrlA
InternetReadFile
winmm
timeGetTime
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
Sections
.text Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ