dll
Static task
static1
Behavioral task
behavioral1
Sample
78f56d824d563502e30fc3ed7b53a222_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
78f56d824d563502e30fc3ed7b53a222_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
78f56d824d563502e30fc3ed7b53a222_JaffaCakes118
-
Size
402KB
-
MD5
78f56d824d563502e30fc3ed7b53a222
-
SHA1
74e7af9d6b8b63adaeae50ac4af636e149d79960
-
SHA256
64f1845b881326fec9db27bb276821c9ceee16448af9b45040310ab8c75e8ce6
-
SHA512
dcc28b61faa7b0144cc3d9a87e00c073e18f01d375a4ce492d24ee39ca67aad993f30435645e177ebf8886107f2dc5b7589adf4b0b1fae3df612062747f1af82
-
SSDEEP
6144:FE803p/qk1TnF0+DlY8W3EKj9nFMaqvQkNJBQOZOnvPs5VnOA084YAtqWD:FE80pCger8W3EknF5aBQO+voVn3ML
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78f56d824d563502e30fc3ed7b53a222_JaffaCakes118
Files
-
78f56d824d563502e30fc3ed7b53a222_JaffaCakes118.dll windows:6 windows x64 arch:x64
e1891136ac60fe404c3d01a424bd32ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
Sleep
CreateThread
DisableThreadLibraryCalls
FreeLibraryAndExitThread
GetModuleHandleW
SetConsoleTitleA
GetCurrentDirectoryA
FindClose
FindFirstFileA
FindNextFileA
VirtualProtect
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
CloseHandle
HeapCreate
HeapAlloc
CreateEventW
HeapFree
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
GetProcAddress
CreateToolhelp32Snapshot
Thread32First
Thread32Next
GetStdHandle
SetStdHandle
GetProcessHeap
GlobalUnlock
GlobalLock
AllocConsole
FreeConsole
AttachConsole
SetConsoleMode
ReadConsoleA
TerminateProcess
GlobalAlloc
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapReAlloc
InitializeSListHead
user32
CloseClipboard
OpenClipboard
GetClipboardData
CallWindowProcW
LoadCursorW
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
ReleaseCapture
SetCapture
GetCapture
GetKeyState
IsChild
EmptyClipboard
SetClipboardData
FindWindowA
SetWindowLongPtrW
MessageBoxW
GetForegroundWindow
GetAsyncKeyState
GetActiveWindow
advapi32
InitializeAcl
OpenProcessToken
AddAccessAllowedAce
AllocateAndInitializeSid
FreeSid
GetLengthSid
GetTokenInformation
SetSecurityInfo
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
msvcp140
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
xinput1_4
ord2
ord4
vcruntime140
__current_exception_context
__std_exception_copy
__std_type_info_destroy_list
__current_exception
__C_specific_handler
strstr
memset
_CxxThrowException
memcmp
memchr
memcpy
__std_terminate
memmove
__std_exception_destroy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_cexit
_execute_onexit_table
_initterm
_initialize_onexit_table
abort
_initterm_e
terminate
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_register_onexit_function
api-ms-win-crt-stdio-l1-1-0
freopen_s
_fileno
fopen
fclose
fflush
__stdio_common_vsscanf
_wfopen
setvbuf
fseek
_open_osfhandle
__acrt_iob_func
__stdio_common_vfprintf
_dup2
__stdio_common_vsprintf
__stdio_common_vsprintf_s
fread
__stdio_common_vsnprintf_s
fwrite
ftell
api-ms-win-crt-string-l1-1-0
strncpy
strcmp
toupper
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
api-ms-win-crt-convert-l1-1-0
atof
strtoul
atoi
atol
api-ms-win-crt-math-l1-1-0
log2f
ceilf
powf
pow
fmodf
logf
acosf
cosf
floorf
sinf
sqrtf
log
_fdopen
api-ms-win-crt-utility-l1-1-0
qsort
Exports
Exports
Sections
.text Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ