Static task
static1
Behavioral task
behavioral1
Sample
94b17067321f51efb03bf2d747cf1d91_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
94b17067321f51efb03bf2d747cf1d91_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
94b17067321f51efb03bf2d747cf1d91_JaffaCakes118
-
Size
135KB
-
MD5
94b17067321f51efb03bf2d747cf1d91
-
SHA1
4e32d72fccaf5e7142377544c5ad69709179bbcd
-
SHA256
f862cc779a2c31c9af5d73ba86ed3c7ef3acc9111ebb2c01c42fc9ed4b5e47f0
-
SHA512
818127a97f6ec6125bc8f395aca5263af313240a3c754f76c079ad45e17352d808c807b455d554e4d29c05053db80b1a83f6cb727e369e63bdbcc7ee3210fd8a
-
SSDEEP
1536:R+truCSeqBpORM7/67lmoVskyhA6b7qayvMlsa5cfxmtsm1KnUcOLS5K5qhVQxRR:Rqusypm+/6ZXVfaessSTsRZOLS5K5wo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94b17067321f51efb03bf2d747cf1d91_JaffaCakes118
Files
-
94b17067321f51efb03bf2d747cf1d91_JaffaCakes118.dll windows:4 windows x86 arch:x86
9f14bc0187f9b9c89fd4c313ceb93f39
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyExW
RegEnumKeyExA
RegLoadKeyW
RegDeleteKeyA
RegDeleteValueW
RegQueryInfoKeyA
RegReplaceKeyW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueW
RegEnumKeyExW
RegLoadKeyA
RegEnumValueA
RegEnumValueW
RegDeleteValueA
RegReplaceKeyA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyW
RegDeleteValueW
RegQueryInfoKeyA
RegOpenKeyA
RegEnumKeyExW
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyW
RegReplaceKeyW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExA
RegGetKeySecurity
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyW
RegEnumKeyExA
RegLoadKeyA
RegCreateKeyExW
RegOpenKeyA
RegQueryValueW
RegEnumKeyA
RegCreateKeyExA
RegReplaceKeyA
RegOpenKeyExA
user32
CalcMenuBar
InsertMenuA
DialogBoxParamA
AlignRects
GetMenu
CopyRect
EndDialog
GetDlgItem
CopyIcon
AppendMenuW
GetWindowTextA
AppendMenuA
DrawIconEx
CopyIcon
EndDialog
DialogBoxParamA
CreateIcon
LoadMenuA
GetFocus
IsMenu
CopyImage
DrawTextW
AppendMenuA
InsertMenuA
GetDC
GetWindowTextA
comctl32
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_EndDrag
ImageList_LoadImageA
ImageList_AddMasked
ImageList_Replace
ImageList_GetDragImage
ImageList_Draw
ImageList_AddIcon
ImageList_LoadImageW
ImageList_DrawIndirect
ImageList_BeginDrag
ImageList_GetIconSize
ImageList_Create
ImageList_Read
ImageList_DrawIndirect
InitCommonControls
ImageList_DragShowNolock
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Draw
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_AddIcon
ImageList_LoadImageW
ImageList_Copy
ImageList_GetIcon
kernel32
OpenFile
CopyFileExA
CreateThread
GetCommandLineA
GetStdHandle
DeleteFileW
GetComputerNameA
WriteFile
ReadFile
GetConsoleMode
FindAtomA
Sleep
ReadConsoleA
GetCPInfo
gdi32
ClearBitmapAttributes
BitBlt
AddFontResourceExA
GetDCOrgEx
AddFontResourceTracking
DeleteObject
RestoreDC
BeginPath
GetClipBox
AddFontResourceW
ClearBrushAttributes
AddFontMemResourceEx
GetPixel
CancelDC
CreateSolidBrush
GetBitmapBits
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 205B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ