Static task
static1
Behavioral task
behavioral1
Sample
72e2475e3a746229a1ff751b72e9bcd0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
72e2475e3a746229a1ff751b72e9bcd0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
72e2475e3a746229a1ff751b72e9bcd0_JaffaCakes118
-
Size
77KB
-
MD5
72e2475e3a746229a1ff751b72e9bcd0
-
SHA1
80cc4240142586233ec50a63ec157fa285270a44
-
SHA256
8cd6211e086e221636c0a742354a46207c947911c9b486ab7f93e3cd3eb236f2
-
SHA512
6f7391d31370c25f03b965785db5c6471d8b9be6b5cb2ff2f654da4c5ea4d6169951af906cfc1640778fe9a9da5d618890710829cbc69f6460ab4de0f95fa134
-
SSDEEP
1536:Y1od+jqOkdLsK6UQHaVsggUYXwyUcCNjDsUtl+k5puak3l:xm/IsifYXDCwyY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72e2475e3a746229a1ff751b72e9bcd0_JaffaCakes118
Files
-
72e2475e3a746229a1ff751b72e9bcd0_JaffaCakes118.dll windows:4 windows x86 arch:x86
7e5d39c8e0b3a087afb9b2f2b9c21140
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
BackupRead
CloseHandle
CreateConsoleScreenBuffer
DisconnectNamedPipe
ExitProcess
FindFirstVolumeA
FindVolumeMountPointClose
GetACP
GetAtomNameA
GetCommandLineA
GetCurrentThread
GetDiskFreeSpaceW
GetFileSizeEx
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcessVersion
GetStartupInfoA
GetTickCount
GetVersionExA
GlobalGetAtomNameW
HeapAlloc
HeapCreate
IsBadWritePtr
LoadLibraryExA
MoveFileExA
ReadFileScatter
SetEnvironmentVariableA
SetEnvironmentVariableW
SetHandleInformation
SetLastError
SetTimeZoneInformation
WriteFile
user32
ShowWindow
SendMessageTimeoutA
ReleaseDC
OpenClipboard
MoveWindow
MessageBoxA
InflateRect
GetParent
GetMenuItemID
GetFocus
GetDoubleClickTime
FrameRect
DrawFrameControl
DrawEdge
DialogBoxParamA
DefWindowProcA
CreateDialogParamA
CheckMenuItem
BeginDeferWindowPos
OffsetRect
msi
MsiSummaryInfoSetPropertyW
MsiSummaryInfoPersist
MsiSourceListClearAllA
MsiRecordSetStreamW
MsiProvideComponentA
MsiProcessAdvertiseScriptW
MsiLocateComponentW
MsiGetShortcutTargetA
MsiGetFeatureUsageA
MsiEnumPatchesW
MsiEnumComponentQualifiersA
MsiEnumClientsW
MsiApplyPatchW
MsiAdvertiseProductExA
MsiVerifyPackageA
oleacc
GetStateTextA
AccessibleObjectFromEvent
oledlg
OleUIInsertObjectA
OleUIAddVerbMenuA
OleUICanConvertOrActivateAs
OleUIChangeIconA
OleUIConvertA
odbc32
SQLColAttributesA
SQLBindParam
PostODBCError
SQLColumnsA
SQLDisconnect
SQLDriverConnectA
SQLErrorA
SQLFreeConnect
SQLGetCursorNameA
SQLGetData
SQLGetDiagFieldW
SQLGetStmtAttrA
SQLMoreResults
SQLNativeSqlA
SQLPrimaryKeysA
SQLSetCursorNameA
SQLSetEnvAttr
SQLTablePrivilegesA
Sections
.text Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ