Static task
static1
Behavioral task
behavioral1
Sample
9fef276a7f8c4defb43240b2251032c6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9fef276a7f8c4defb43240b2251032c6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
9fef276a7f8c4defb43240b2251032c6_JaffaCakes118
-
Size
123KB
-
MD5
9fef276a7f8c4defb43240b2251032c6
-
SHA1
654ea6c82e8a22a4d4f7407e14231a490e87880d
-
SHA256
5c00b290744a339d5bffccb3f1941462be9cd96cc6ed4fe5a7d6d92c3ad3aa2f
-
SHA512
9b78eaa35f53d73d34c98fb93099b22db3d3a59c906c9c84adc99c04a4dda4dd9b1a8381eea53d6c34f503b9ffc25eac75d365ae5ac947d0f3c10759ac7c748a
-
SSDEEP
3072:4yvbX3RPbvMTxoFEQn29dMJvVzp88bYeJlGj:42XpvMGFd29dSz6ElDG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fef276a7f8c4defb43240b2251032c6_JaffaCakes118
Files
-
9fef276a7f8c4defb43240b2251032c6_JaffaCakes118.dll windows:4 windows x86 arch:x86
43e6d2059b88f154801ecebc158ae73b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
FreeLibrary
GetLocalTime
SizeofResource
FindResourceW
HeapFree
TerminateProcess
HeapSize
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleA
ReleaseMutex
LoadResource
LockResource
InterlockedExchange
lstrlenW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
VirtualAlloc
lstrcpyW
CloseHandle
DisableThreadLibraryCalls
lstrcatW
GetModuleFileNameW
LocalFree
OutputDebugStringW
GlobalFree
GlobalAlloc
LocalAlloc
MultiByteToWideChar
GetLastError
VirtualProtect
VirtualFree
GetCommandLineA
HeapAlloc
user32
RegisterClassA
UnregisterClassA
DefWindowProcW
LoadStringW
MessageBoxW
ShowWindow
GetWindowTextW
SetWindowTextW
EndDialog
GetDlgCtrlID
SendMessageW
SetWindowPos
BeginPaint
EndPaint
WinHelpW
LoadMenuW
GetSubMenu
TrackPopupMenu
DialogBoxParamW
SendDlgItemMessageW
GetDlgItemTextW
SetFocus
SetWindowLongW
SetDlgItemTextW
CheckDlgButton
SetDlgItemInt
IsDlgButtonChecked
GetWindowLongW
GetWindowInfo
CreateWindowExW
EnableWindow
GetDlgItem
GetWindowRect
advapi32
RegEnumValueW
RegEnumKeyExW
RegSetValueW
RegDeleteKeyW
RegOpenKeyW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
gdi32
RealizePalette
SelectPalette
CreatePalette
GetObjectW
CreateDIBitmap
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
ole32
CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoCreateInstance
msvcr71
wcscat
iswalnum
wcslen
__dllonexit
sprintf
swprintf
_except_handler3
_itow
wcschr
wcscmp
wcsncpy
wcscpy
strncmp
vswprintf
free
_adjust_fdiv
malloc
_initterm
_onexit
_callnewh
_CxxThrowException
_vsnwprintf
memset
_vsnprintf
wcsncmp
wcsstr
__CppXcptFilter
_XcptFilter
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ