Static task
static1
Behavioral task
behavioral1
Sample
a109144b4757f31085b4fd1aef73379b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a109144b4757f31085b4fd1aef73379b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a109144b4757f31085b4fd1aef73379b_JaffaCakes118
-
Size
120KB
-
MD5
a109144b4757f31085b4fd1aef73379b
-
SHA1
180dbd6ab0bcb229073a96025733018666e701fb
-
SHA256
66562672661541f9d04320b74df0db3b31488af6f1f29a6bd84ac7210b4f77db
-
SHA512
4a00319fce18ccdaf03cd9b1e3e2dc5d6d25c1630c2ad34e28b827ae395b45b7207f60c1e92b918f01d0af11bdf3a89206a006908344904f2f21be313580d104
-
SSDEEP
1536:hdoiigbxMlURnFw/tT7dHivte+0lvUcqVIlTXEgiI1l+/FKlQXV+FXnUIoHl5eoo:ht+6Fy4vkUBIN0giIAgQqXV5oyyIcQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a109144b4757f31085b4fd1aef73379b_JaffaCakes118
Files
-
a109144b4757f31085b4fd1aef73379b_JaffaCakes118.dll windows:4 windows x86 arch:x86
0659111ff26f1d8b2b20a9f8a4d5c427
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LocalFree
GetStringTypeA
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
HeapAlloc
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
DisableThreadLibraryCalls
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
RtlUnwind
InterlockedIncrement
InterlockedDecrement
FindClose
FindFirstFileW
lstrlenW
GetModuleFileNameW
LocalAlloc
LCMapStringW
LoadLibraryA
GlobalAlloc
MulDiv
CloseHandle
SetEvent
CreateEventW
CreateThread
GetModuleHandleW
GetProcAddress
GetCommandLineA
FreeEnvironmentStringsA
VirtualProtect
GetStringTypeW
user32
IsWindow
wsprintfW
BeginPaint
GetParent
GetSysColor
SendDlgItemMessageW
SetFocus
EnableWindow
SetWindowLongW
SetCursor
UpdateWindow
MapWindowPoints
TranslateMessage
TrackPopupMenu
CreateDialogParamW
CreateMenu
GetSubMenu
DestroyWindow
GetDlgItemTextW
GetWindowTextW
GetClientRect
GetSystemMetrics
EndPaint
InvalidateRect
DefWindowProcW
WinHelpW
SendMessageW
LoadStringW
RegisterClipboardFormatW
PostMessageW
LoadCursorW
SetWindowPos
GetWindowLongW
SetWindowTextW
DestroyMenu
GetMenuItemCount
SetMenuItemInfoW
InsertMenuW
CreatePopupMenu
CheckMenuRadioItem
EnableMenuItem
CheckMenuItem
SystemParametersInfoW
GetDialogBaseUnits
GetWindowTextLengthW
OffsetRect
GetSysColorBrush
InflateRect
DrawFocusRect
DrawStateW
GetMenuStringW
PeekMessageW
GetMessageW
GetActiveWindow
PostThreadMessageW
InsertMenuItemW
IsWindowEnabled
GetWindow
MessageBoxW
KillTimer
SetTimer
MsgWaitForMultipleObjects
SetDlgItemTextW
IsDialogMessageW
GetDlgItem
DispatchMessageW
SetActiveWindow
FillRect
DrawEdge
ScreenToClient
ChildWindowFromPoint
GetDlgCtrlID
GetMenuItemInfoW
SetForegroundWindow
DestroyIcon
SetMenu
IsChild
GetWindowRect
DrawMenuBar
GetAsyncKeyState
GetFocus
ShowWindow
GetMenu
IsWindowVisible
advapi32
RegQueryValueExA
RegEnumKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
RegCreateKeyW
RegOpenKeyExW
gdi32
PatBlt
CreateCompatibleDC
GetTextExtentPointW
DeleteDC
DeleteObject
SelectObject
SetTextColor
SetBkColor
GetTextExtentPoint32W
ExtTextOutW
CreateFontIndirectW
ole32
CoMarshalInterThreadInterfaceInStream
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
CoInitialize
CoCreateInstance
CoUninitialize
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ