Static task
static1
Behavioral task
behavioral1
Sample
a3059cec7821d0b1078a1dd08d072eed_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a3059cec7821d0b1078a1dd08d072eed_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a3059cec7821d0b1078a1dd08d072eed_JaffaCakes118
-
Size
65KB
-
MD5
a3059cec7821d0b1078a1dd08d072eed
-
SHA1
a6c63beff01f8c3443d1e945b231c50a90d8c23f
-
SHA256
0bda86593abda3db694c13b59cb70b1158de0fc59d46b3cdd863fdb58ef239c2
-
SHA512
21614a99cbb45a4e0e683185d9d158e36ec07e568e43f5fb9fc9b179d44a113332a68d174e33d18a9dbf994525ba3dca799c173cd14b153a021561a0e5a2c041
-
SSDEEP
1536:sCkIrWxr/MKL7dZlNo+ZocxuvbWhWB3rk9L8Yrk+dg55q59:sCzWxr971ZrxSbWC8XQX4/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3059cec7821d0b1078a1dd08d072eed_JaffaCakes118
Files
-
a3059cec7821d0b1078a1dd08d072eed_JaffaCakes118.dll windows:4 windows x86 arch:x86
c69dd54db4819c89fbf82df497dfa867
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
dinput
DirectInputCreateEx
DirectInputCreateA
kernel32
SetCurrentDirectoryA
lstrcmpA
TlsGetValue
CloseHandle
EnumResourceLanguagesW
ExitProcess
GetModuleHandleA
GetTimeFormatA
LoadResource
MapViewOfFile
SetUnhandledExceptionFilter
SetLastError
ole32
DoDragDrop
OleInitialize
OleSetClipboard
OleUninitialize
CoInitialize
CreateOleAdviseHolder
RegisterDragDrop
WriteClassStg
WriteClassStm
WriteFmtUserTypeStg
CreateDataAdviseHolder
CoUninitialize
CoRegisterMessageFilter
CoRegisterClassObject
ReadClassStg
CLSIDFromProgID
CoCreateInstance
CoGetClassObject
CoGetMalloc
ProgIDFromCLSID
dsound
DirectSoundEnumerateW
DirectSoundCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureCreate
user32
DestroyMenu
DestroyCaret
EnableMenuItem
shell32
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteA
ShellExecuteExA
ShellExecuteExW
SHFileOperationA
msvfw32
GetOpenFileNamePreviewW
GetSaveFileNamePreviewW
ICMThunk32
DrawDibProfileDisplay
Sections
.text Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ