Static task
static1
Behavioral task
behavioral1
Sample
a879c5037c6798f536d0303da98bf78d_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a879c5037c6798f536d0303da98bf78d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a879c5037c6798f536d0303da98bf78d_JaffaCakes118
-
Size
51KB
-
MD5
a879c5037c6798f536d0303da98bf78d
-
SHA1
61627b798cf639e7dee95680a341622c72d2fc04
-
SHA256
b3b65b5030353beb5e83fa2eb9f6d612608d3af6824eec4fc2cf7ea002156677
-
SHA512
63cb324930bf9391e1327f8d66340fdbca6bd70cb1e35bdcb24858ccdf1cb864c3ddd88c39f09b641729bb0e43b86a79a6e096ac242f8d058d7bb2de01a06497
-
SSDEEP
768:jqG/bFrTWsrN8qCRVQsXXYba93snTvhFNYy9QlJ:mcbRTtUXXYW9cnT5LYp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a879c5037c6798f536d0303da98bf78d_JaffaCakes118
Files
-
a879c5037c6798f536d0303da98bf78d_JaffaCakes118.dll windows:5 windows x86 arch:x86
98965317d5e069b740a109aab16502f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DisconnectNamedPipe
DnsHostnameToComputerNameW
DuplicateHandle
EnumCalendarInfoExW
EnumCalendarInfoW
EnumDateFormatsExA
EnumResourceLanguagesA
EnumSystemLanguageGroupsW
EnumSystemLocalesA
EnumTimeFormatsW
EnumUILanguagesA
ExitProcess
FatalAppExitA
FatalAppExitW
FileTimeToLocalFileTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstVolumeA
FindFirstVolumeW
FindNextChangeNotification
FindNextVolumeMountPointA
FindNextVolumeMountPointW
FindResourceExA
FindResourceW
FlushConsoleInputBuffer
FlushFileBuffers
FoldStringA
FreeLibraryAndExitThread
FreeResource
GenerateConsoleCtrlEvent
GetBinaryTypeA
GetBinaryTypeW
GetCPInfo
GetCPInfoExW
GetCalendarInfoA
GetCalendarInfoW
GetCommMask
GetConsoleAliasExesLengthW
GetConsoleAliasesW
GetConsoleCP
GetConsoleDisplayMode
GetConsoleFontSize
GetConsoleMode
GetCurrentConsoleFont
GetCurrentThread
GetDateFormatA
GetDefaultCommConfigA
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetEnvironmentStrings
GetEnvironmentStringsA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetLargestConsoleWindowSize
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetMailslotInfo
GetModuleFileNameA
GetNamedPipeInfo
GetNumberFormatW
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetPrivateProfileStringA
GetPrivateProfileStructW
GetProcessPriorityBoost
GetProcessVersion
GetProfileSectionW
GetProfileStringA
GetProfileStringW
GetStringTypeA
GetStringTypeExA
GetSystemDirectoryA
GetSystemInfo
GetSystemPowerStatus
GetThreadPriorityBoost
GetTimeFormatA
GetUserDefaultLCID
GetUserDefaultUILanguage
GetVersionExA
GetVolumeInformationW
GetVolumeNameForVolumeMountPointA
GetVolumeNameForVolumeMountPointW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAddAtomA
GlobalDeleteAtom
GlobalFindAtomA
GlobalFix
GlobalGetAtomNameA
GlobalMemoryStatus
GlobalWire
DeviceIoControl
HeapCreate
HeapDestroy
HeapLock
HeapUnlock
HeapWalk
InitializeCriticalSection
InterlockedExchangeAdd
IsBadStringPtrA
IsBadStringPtrW
IsDBCSLeadByteEx
IsDebuggerPresent
LCMapStringA
LoadLibraryA
LoadLibraryExW
LocalHandle
LocalSize
LockResource
MapUserPhysicalPages
MoveFileWithProgressW
MulDiv
OpenFileMappingA
OpenFileMappingW
OpenJobObjectW
OutputDebugStringA
PeekConsoleInputW
PostQueuedCompletionStatus
PrepareTape
QueryPerformanceFrequency
RaiseException
ReadDirectoryChangesW
ReleaseMutex
RemoveDirectoryA
RemoveDirectoryW
ReplaceFileA
RequestWakeupLatency
ResetWriteWatch
RtlFillMemory
RtlMoveMemory
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SearchPathW
SetCommState
SetComputerNameA
SetConsoleCursorInfo
SetConsoleWindowInfo
SetCurrentDirectoryA
SetDefaultCommConfigA
SetDefaultCommConfigW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFileApisToANSI
SetFileTime
SetHandleInformation
SetLocaleInfoW
SetMailslotInfo
SetNamedPipeHandleState
SetSystemTime
SetThreadContext
SetTimeZoneInformation
SystemTimeToFileTime
TerminateThread
Thread32First
Thread32Next
TlsGetValue
Toolhelp32ReadProcessMemory
TransmitCommChar
UnhandledExceptionFilter
UnlockFile
UnregisterWaitEx
UpdateResourceA
VerSetConditionMask
VerifyVersionInfoA
VirtualUnlock
WaitCommEvent
WaitNamedPipeA
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleA
WriteConsoleOutputA
WriteConsoleW
WritePrivateProfileSectionA
WritePrivateProfileSectionW
WritePrivateProfileStringA
WritePrivateProfileStringW
WritePrivateProfileStructA
WriteProfileSectionA
_hread
_llseek
_lopen
lstrcatW
lstrcmpiA
lstrcpynW
DeleteVolumeMountPointW
DeleteFileW
VirtualAllocEx
DebugBreak
CreateToolhelp32Snapshot
CreateThread
CreateSemaphoreW
CreateNamedPipeW
CreateNamedPipeA
CreateDirectoryExW
CreateDirectoryA
CopyFileA
ConvertThreadToFiber
ContinueDebugEvent
CompareStringA
CallNamedPipeW
CallNamedPipeA
BuildCommDCBAndTimeoutsA
BindIoCompletionCallback
BackupRead
AreFileApisANSI
AddAtomW
GetCommandLineA
HeapCompact
user32
LoadIconA
comdlg32
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
ReplaceTextW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
GetOpenFileNameW
ChooseColorA
advapi32
RegOpenKeyExA
ole32
CLIPFORMAT_UserUnmarshal
CLSIDFromProgID
CLSIDFromProgIDEx
CLSIDFromString
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoCreateInstance
CoCreateInstanceEx
CoDisableCallCancellation
CoDisconnectObject
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoGetApartmentID
CoGetCallContext
CoGetClassObject
CoGetClassVersion
CoGetCurrentLogicalThreadId
CoGetCurrentProcess
CoGetInterfaceAndReleaseStream
CoGetMarshalSizeMax
CoGetObject
CoGetObjectContext
CoGetPSClsid
CoGetStdMarshalEx
CoInitialize
CoInitializeSecurity
CoInitializeWOW
CoIsHandlerConnected
CoLoadLibrary
CoLockObjectExternal
CoMarshalHresult
CoMarshalInterThreadInterfaceInStream
CoMarshalInterface
CoQueryClientBlanket
CoQueryReleaseObject
CoRegisterChannelHook
CoRegisterClassObject
CoRegisterMallocSpy
CoRegisterMessageFilter
CoRegisterPSClsid
CoRegisterSurrogate
CoRegisterSurrogateEx
CoReleaseMarshalData
CoReleaseServerProcess
CoResumeClassObjects
CoRevokeClassObject
CoRevokeMallocSpy
CoSetCancelObject
CoSuspendClassObjects
CoSwitchCallContext
CoTestCancel
CoTreatAsClass
CoUninitialize
CoUnmarshalInterface
CreateAntiMoniker
CreateClassMoniker
CreateDataAdviseHolder
CreateFileMoniker
CreateILockBytesOnHGlobal
CreateItemMoniker
CreateObjrefMoniker
CreateOleAdviseHolder
CreateStdProgressIndicator
CreateStreamOnHGlobal
DcomChannelSetHResult
DllDebugObjectRPCHook
DllGetClassObjectWOW
DoDragDrop
EnableHookObject
FmtIdToPropStgName
GetClassFile
GetDocumentBitStg
GetHGlobalFromStream
HACCEL_UserFree
HACCEL_UserMarshal
HBITMAP_UserFree
HBITMAP_UserMarshal
HBITMAP_UserUnmarshal
HBRUSH_UserFree
HBRUSH_UserMarshal
HBRUSH_UserUnmarshal
HDC_UserFree
HDC_UserMarshal
HDC_UserSize
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HENHMETAFILE_UserUnmarshal
HGLOBAL_UserFree
HGLOBAL_UserSize
CLIPFORMAT_UserMarshal
HICON_UserFree
HICON_UserMarshal
HICON_UserSize
HICON_UserUnmarshal
HMENU_UserFree
HMENU_UserMarshal
HMENU_UserSize
HMETAFILEPICT_UserFree
HMETAFILEPICT_UserMarshal
HMETAFILEPICT_UserSize
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HMETAFILE_UserUnmarshal
HPALETTE_UserFree
HPALETTE_UserSize
HPALETTE_UserUnmarshal
HWND_UserSize
HWND_UserUnmarshal
MonikerCommonPrefixWith
MonikerRelativePathTo
OleBuildVersion
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorageEx
OleCreateDefaultHandler
OleCreateEmbeddingHelper
OleCreateFromDataEx
OleCreateFromFile
OleCreateFromFileEx
OleCreateLink
OleCreateLinkFromData
OleCreateLinkToFile
OleCreateMenuDescriptor
OleCreateStaticFromData
OleDestroyMenuDescriptor
OleDraw
OleDuplicateData
OleFlushClipboard
OleGetClipboard
OleGetIconOfFile
OleIsCurrentClipboard
OleLoad
OleLoadFromStream
OleLockRunning
OleQueryLinkFromData
OleRegEnumFormatEtc
OleRegEnumVerbs
OleRegGetMiscStatus
OleRegGetUserType
OleRun
OleSave
OleSaveToStream
OleSetContainedObject
OleSetMenuDescriptor
OleTranslateAccelerator
OleUninitialize
ProgIDFromCLSID
PropStgNameToFmtId
PropVariantClear
ReadClassStg
ReadClassStm
ReadFmtUserTypeStg
ReadOleStg
ReleaseStgMedium
RevokeDragDrop
SNB_UserFree
SNB_UserMarshal
SNB_UserUnmarshal
STGMEDIUM_UserFree
STGMEDIUM_UserMarshal
STGMEDIUM_UserUnmarshal
SetDocumentBitStg
StgConvertVariantToProperty
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgCreatePropStg
StgGetIFillLockBytesOnFile
StgIsStorageILockBytes
StgOpenPropStg
StgOpenStorage
StgOpenStorageEx
StgOpenStorageOnILockBytes
StgPropertyLengthAsVariant
StgSetTimes
StringFromCLSID
StringFromGUID2
UpdateDCOMSettings
UtConvertDvtd32toDvtd16
UtGetDvtd16Info
UtGetDvtd32Info
WdtpInterfacePointer_UserFree
WdtpInterfacePointer_UserMarshal
WdtpInterfacePointer_UserUnmarshal
WriteClassStm
CLIPFORMAT_UserFree
HGLOBAL_UserUnmarshal
msvcrt
memcpy
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ