Static task
static1
Behavioral task
behavioral1
Sample
a1341e5de70e1918fe30a2ba5a1a4939_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a1341e5de70e1918fe30a2ba5a1a4939_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a1341e5de70e1918fe30a2ba5a1a4939_JaffaCakes118
-
Size
123KB
-
MD5
a1341e5de70e1918fe30a2ba5a1a4939
-
SHA1
09757b17e19fc2bd2a15b477a60c96e1bbe0e3fe
-
SHA256
4e759b95c8e0fa31c679f0ec80819a217ea021fb4cb03efecda968426229e633
-
SHA512
ffe3332baf4973782a3f7101bb40eb933a5efc956e088ea3b925f857f2e7e4d4448c8f26e381d06bb079ca6c0495b6e01e2ffe29bfbec45a20238e45e0ee08e3
-
SSDEEP
3072:zyvbX3RPbvMTxoF7nlqdy9aMJmVZpNMEYeqlGk:z2XpvMGFp19aRZAEl+G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1341e5de70e1918fe30a2ba5a1a4939_JaffaCakes118
Files
-
a1341e5de70e1918fe30a2ba5a1a4939_JaffaCakes118.dll windows:4 windows x86 arch:x86
43e6d2059b88f154801ecebc158ae73b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
FreeLibrary
GetLocalTime
SizeofResource
FindResourceW
HeapFree
TerminateProcess
HeapSize
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleA
ReleaseMutex
LoadResource
LockResource
InterlockedExchange
lstrlenW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
VirtualAlloc
lstrcpyW
CloseHandle
DisableThreadLibraryCalls
lstrcatW
GetModuleFileNameW
LocalFree
OutputDebugStringW
GlobalFree
GlobalAlloc
LocalAlloc
MultiByteToWideChar
GetLastError
VirtualProtect
VirtualFree
GetCommandLineA
HeapAlloc
user32
RegisterClassA
UnregisterClassA
DefWindowProcW
LoadStringW
MessageBoxW
ShowWindow
GetWindowTextW
SetWindowTextW
EndDialog
GetDlgCtrlID
SendMessageW
SetWindowPos
BeginPaint
EndPaint
WinHelpW
LoadMenuW
GetSubMenu
TrackPopupMenu
DialogBoxParamW
SendDlgItemMessageW
GetDlgItemTextW
SetFocus
SetWindowLongW
SetDlgItemTextW
CheckDlgButton
SetDlgItemInt
IsDlgButtonChecked
GetWindowLongW
GetWindowInfo
CreateWindowExW
EnableWindow
GetDlgItem
GetWindowRect
advapi32
RegEnumValueW
RegEnumKeyExW
RegSetValueW
RegDeleteKeyW
RegOpenKeyW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
gdi32
RealizePalette
SelectPalette
CreatePalette
GetObjectW
CreateDIBitmap
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
ole32
CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoCreateInstance
msvcr71
wcscat
iswalnum
wcslen
__dllonexit
sprintf
swprintf
_except_handler3
_itow
wcschr
wcscmp
wcsncpy
wcscpy
strncmp
vswprintf
free
_adjust_fdiv
malloc
_initterm
_onexit
_callnewh
_CxxThrowException
_vsnwprintf
memset
_vsnprintf
wcsncmp
wcsstr
__CppXcptFilter
_XcptFilter
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ