Static task
static1
Behavioral task
behavioral1
Sample
71f46c72631ee3e1976f7740596b789c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71f46c72631ee3e1976f7740596b789c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
71f46c72631ee3e1976f7740596b789c_JaffaCakes118
-
Size
92KB
-
MD5
71f46c72631ee3e1976f7740596b789c
-
SHA1
5f819134e251c3af35e53f7ab7f2371d84634da9
-
SHA256
1c73a2a44984dd530fa6c3ade12ea0056de1e04aabc1a14ced521dd7772b8dfd
-
SHA512
8e414a3922b70867edbd307354875da8ffd69dbe4048d71e3266336df3fe9e1002e4566fcc42883e20c4ba9b277b29a553849a0078083837fa78d4e3c258ee42
-
SSDEEP
1536:osSq087GQ+rxphIORBvWyBMZ5PiyurcT3Z10dO9yuG01ChK9NL32zLsedXN:oH3CAlpht3WOMZ5cQTQdO9yX0TMz4K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71f46c72631ee3e1976f7740596b789c_JaffaCakes118
Files
-
71f46c72631ee3e1976f7740596b789c_JaffaCakes118.dll windows:4 windows x86 arch:x86
8fba4ddcb248a65db63666555a1c9dbb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comdlg32
ChooseColorA
ChooseColorW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
dwOKSubclass
WantArrows
GetOpenFileNameA
GetOpenFileNameW
LoadAlterBitmap
PrintDlgA
ReplaceTextW
user32
DialogBoxParamA
EnumWindows
GetDesktopWindow
GetUserObjectSecurity
ScreenToClient
SendMessageA
kernel32
HeapCreate
GetDevicePowerState
GetCommandLineA
GetACP
ExpandEnvironmentStringsA
ExitProcess
EnumSystemLocalesW
EnumLanguageGroupLocalesW
CreateWaitableTimerW
CloseHandle
CallNamedPipeW
GetModuleHandleA
SetSystemPowerState
SetComputerNameA
RtlMoveMemory
LCMapStringA
GetStartupInfoA
HeapAlloc
GetVersionExA
GetLogicalDrives
ole32
StringFromGUID2
CoCreateInstance
CLSIDFromString
dbghelp
FindDebugInfoFileEx
ImageNtHeader
ImageRvaToVa
MapDebugInformation
SymEnumSourceFiles
SymFromAddr
SymGetLineFromAddr64
SymGetLinePrev64
SymGetSymFromAddr
SymGetSymPrev
SymGetTypeFromName
SymMatchString
SymSetOptions
UnmapDebugInformation
ImageDirectoryEntryToData
comctl32
CreateStatusWindowA
DestroyPropertySheetPage
DrawInsert
FlatSB_SetScrollInfo
ImageList_DrawEx
ImageList_GetBkColor
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_Merge
ImageList_SetFilter
UninitializeFlatSB
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ