Static task
static1
Behavioral task
behavioral1
Sample
82e9e18096352b42569eac69759d5edc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
82e9e18096352b42569eac69759d5edc_JaffaCakes118.dll
Resource
win10v2004-20240730-en
General
-
Target
82e9e18096352b42569eac69759d5edc_JaffaCakes118
-
Size
160KB
-
MD5
82e9e18096352b42569eac69759d5edc
-
SHA1
105d3b902d0a21ea988255a18199d469037b662c
-
SHA256
475943dcf19debff6ac31a1b59f95babb85a07f1ac2816f7df651823cb63a403
-
SHA512
2204f424ba89bb84830d59b1bed8b4b9314555d21377c6ac6d52350549fa036dfcf3df6de205361d04af76e6bde8cf137c033a06cd4086549b535ab0cd7f907e
-
SSDEEP
3072:EIG8/m7p7ICoKZRfCl+LukV23HJ1SMqqDLy/6e91L2wCus:LduNUChrfC/ks51xqqDLut91L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82e9e18096352b42569eac69759d5edc_JaffaCakes118
Files
-
82e9e18096352b42569eac69759d5edc_JaffaCakes118.dll windows:4 windows x86 arch:x86
1234d22a1d8ee6ae38a41144599d529a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTimeFormatW
WaitForSingleObject
lstrcatW
InterlockedIncrement
LoadLibraryW
GlobalAlloc
QueryPerformanceCounter
GetEnvironmentVariableW
GlobalFree
GlobalLock
InterlockedDecrement
FindResourceW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetDateFormatW
GetCommandLineA
GetDateFormatA
CompareStringA
GetFileSize
Sleep
CreateFileA
GetLocalTime
SetFilePointer
SetEndOfFile
GetProcAddress
CloseHandle
GetCurrentProcess
LocalFree
LocalAlloc
GetSystemTimeAsFileTime
OutputDebugStringA
GetComputerNameW
ReleaseMutex
CreateFileW
lstrcpynW
lstrcpyW
DisableThreadLibraryCalls
GetProcessHeap
FindResourceExA
SizeofResource
LoadResource
GetTimeFormatA
LockResource
FreeLibrary
lstrcmpA
lstrlenW
FormatMessageW
lstrcpyA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcatA
WriteFile
VirtualProtect
GlobalUnlock
user32
wsprintfW
RegisterClipboardFormatW
LoadBitmapW
LoadImageW
MessageBoxW
LoadStringW
SendMessageW
SetWindowTextW
EndDialog
SendDlgItemMessageW
ReleaseCapture
SetWindowLongA
SetCapture
MoveWindow
CreateWindowExA
PostMessageA
SetClassLongA
GetDlgItemTextW
GetParent
SetWindowPos
wsprintfA
CallWindowProcA
IsWindowEnabled
PeekMessageA
SetFocus
EnableWindow
GetDlgItem
ShowWindow
GetFocus
UpdateWindow
GetNextDlgTabItem
GetClientRect
DrawFocusRect
LoadCursorA
WinHelpW
ReleaseDC
GetDC
SetWindowTextA
SendMessageA
SetDlgItemTextW
SendDlgItemMessageA
LoadStringA
GetDesktopWindow
InvalidateRect
FillRect
MapWindowPoints
GetWindowRect
SetCursor
GetWindowLongA
advapi32
GetTokenInformation
OpenSCManagerW
OpenServiceW
QueryServiceConfigA
LockServiceDatabase
ChangeServiceConfigA
CryptAcquireContextA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
StartServiceA
QueryServiceStatus
RegOpenKeyExA
FreeSid
EqualSid
AllocateAndInitializeSid
CloseServiceHandle
StartServiceW
UnlockServiceDatabase
CryptGetUserKey
CryptDestroyKey
CryptSetProvParam
CryptGetProvParam
CryptReleaseContext
RegCreateKeyExW
RegSetValueExW
RegSetValueExA
RegOpenKeyExW
RegCloseKey
OpenProcessToken
ControlService
gdi32
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
SetBkColor
CreateBitmap
GetObjectA
DeleteObject
GetFontResourceInfoW
GetObjectW
DeleteDC
ole32
CoTaskMemFree
StringFromCLSID
StringFromGUID2
CLSIDFromString
CoTaskMemAlloc
msvcrt
_except_handler3
__CxxFrameHandler
wcschr
memmove
iswspace
iswprint
_wcsicmp
wcscmp
wcscpy
malloc
_adjust_fdiv
_initterm
free
mbstowcs
wcstombs
wcslen
_CxxThrowException
__dllonexit
_onexit
wcscat
Sections
.text Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ