GetFlashSetting
Static task
static1
Behavioral task
behavioral1
Sample
87cb181b4f20519667a97f4461e40b70_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87cb181b4f20519667a97f4461e40b70_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
87cb181b4f20519667a97f4461e40b70_JaffaCakes118
-
Size
358KB
-
MD5
87cb181b4f20519667a97f4461e40b70
-
SHA1
c490e17212c98fe047d48346756c4479780d9d44
-
SHA256
bd1500d1c49b068526bfdd040463f767fe225264d64976cc76cf3c63ec91eb63
-
SHA512
4c45b954a4b77335b6985d271ed5af659b44e10f3bfe47527251ee3b4fcc336b199d82ce5aeadbabae8fd2e7728761971910df286e2783d69a2971fb0f8b6b4a
-
SSDEEP
6144:UlKm2wmOhURlTu4qIA6UnaDLpN8dVR7dN6HGaG5imCFFmLD9HE:UlFm13uQOQN05aGhc5/mPBE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87cb181b4f20519667a97f4461e40b70_JaffaCakes118
Files
-
87cb181b4f20519667a97f4461e40b70_JaffaCakes118.dll windows:4 windows x86 arch:x86
793b1298e6e33746a8a00eee52dfc875
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedDecrement
InterlockedIncrement
GetProcAddress
FreeLibrary
LoadLibraryA
CloseHandle
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
lstrlenW
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
SetConsoleCtrlHandler
WriteFile
GetStdHandle
GetModuleFileNameA
HeapAlloc
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FatalAppExitA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
IsValidLocale
IsValidCodePage
user32
ReleaseDC
GetDC
IntersectRect
IsRectEmpty
gdi32
SetROP2
GetStockObject
Rectangle
MoveToEx
LineTo
SetTextAlign
SetTextColor
TextOutA
SelectClipRgn
CreateCompatibleDC
RestoreDC
StretchDIBits
SetStretchBltMode
DPtoLP
SetWindowOrgEx
SetViewportOrgEx
SetMapMode
SaveDC
LPtoDP
GetMapMode
GetClipBox
GetWindowExtEx
GetViewportExtEx
GetTextExtentPoint32A
DeleteObject
SelectObject
CreateFontIndirectA
SetBkMode
SetMetaRgn
IntersectClipRect
SetViewportExtEx
SetWindowExtEx
ExtTextOutA
SetBkColor
DeleteDC
CreateDIBSection
advapi32
RegOpenKeyA
RegQueryValueA
RegCloseKey
ole32
CoInitialize
CoUninitialize
oleaut32
SysFreeString
VariantInit
VariantClear
CreateErrorInfo
VariantChangeType
SetErrorInfo
GetErrorInfo
SysAllocString
Exports
Exports
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ