Static task
static1
Behavioral task
behavioral1
Sample
7542d82f2a51569f9dd857c536dee15d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7542d82f2a51569f9dd857c536dee15d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
7542d82f2a51569f9dd857c536dee15d_JaffaCakes118
-
Size
237KB
-
MD5
7542d82f2a51569f9dd857c536dee15d
-
SHA1
ef1633c1ecd9d6772f99823ef7799aefcff80b8d
-
SHA256
a854aee9e523af50781a4b4f98c4c5a2aaa5caceb103a5213e47329c215fedc0
-
SHA512
041452be6d1d1e107bc73f3de888fc401342b6a5b5b046d0b836eb5df851d2344c883eccd9ad46a371dfac1615421de34f9be58b5e5f5c519f7a88dde9f1b0ca
-
SSDEEP
6144:/g92V4PGZhDn2gSVba49we9Saaex+Z1KvVEu:LyGZhBxsfj+Zwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7542d82f2a51569f9dd857c536dee15d_JaffaCakes118
Files
-
7542d82f2a51569f9dd857c536dee15d_JaffaCakes118.dll windows:4 windows x86 arch:x86
e14f77ef26a96580bd591409a95bf42a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gdi32
RestoreDC
SetPixel
CreateBrushIndirect
SetTextColor
kernel32
GetLastError
GetACP
IsBadHugeReadPtr
GetVersionExA
lstrlenW
GetModuleHandleA
CloseHandle
VirtualAllocEx
GetFullPathNameA
ExitProcess
FindResourceA
ExitThread
lstrcatA
CreateThread
lstrcmpiA
Sleep
GetDiskFreeSpaceA
lstrlenA
HeapAlloc
GetProcAddress
lstrcmpA
GlobalAlloc
GetSystemDefaultLangID
GetCurrentThreadId
lstrcpynA
LocalAlloc
LoadLibraryExA
GetCommandLineA
GetFileSize
SetErrorMode
DeleteFileA
GetCurrentProcess
comdlg32
ChooseColorA
version
GetFileVersionInfoSizeA
comctl32
ImageList_Read
ImageList_Add
ImageList_Draw
ImageList_Create
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Remove
shlwapi
PathIsDirectoryA
PathFileExistsA
SHGetValueA
SHEnumValueA
SHQueryInfoKeyA
SHStrDupA
PathGetCharTypeA
shell32
SHGetFolderPathA
SHGetSpecialFolderLocation
SHGetFileInfoA
oleaut32
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayGetElement
GetErrorInfo
SysStringLen
SafeArrayPtrOfIndex
user32
CallNextHookEx
BeginPaint
AdjustWindowRectEx
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 1024B - Virtual size: 861B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ