__SetWindowContextHelpId@12
Static task
static1
Behavioral task
behavioral1
Sample
a5a37fca2c3241b92380c289e65c8f45_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5a37fca2c3241b92380c289e65c8f45_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a5a37fca2c3241b92380c289e65c8f45_JaffaCakes118
-
Size
148KB
-
MD5
a5a37fca2c3241b92380c289e65c8f45
-
SHA1
dd8acf9584f89f47d7b91543d73bfb9a5f801376
-
SHA256
e88ec901a2213fe1b950b7f72df669a72ad4b32565fa48d6f216dace457dba01
-
SHA512
b8b91e04a303e29ae6a4e20960af2d11725670b8270d4bb2a790f155720cf173329c62f1060efd1708e1fc69d9f6809bd4627ef96ffe903c156ec2ed827bbf9e
-
SSDEEP
3072:2xtz9dNmvkjKc3NEtRp688mdwV05JuqwNIowKUCzarDNwVRYADg:wzXZKcdE/p688meV0QJDzarS3PD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5a37fca2c3241b92380c289e65c8f45_JaffaCakes118
Files
-
a5a37fca2c3241b92380c289e65c8f45_JaffaCakes118.dll windows:5 windows x86 arch:x86
56ce48940017805857dcbac487a4bacf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathCommonPrefixW
StrFromTimeIntervalW
StrCmpW
PathCombineW
StrToIntExW
StrStrIW
shell32
ord147
kernel32
OpenEventA
FileTimeToDosDateTime
GetCommState
EnumResourceLanguagesA
lstrcmpW
GetHandleInformation
GetFileAttributesA
GetFileType
LockResource
SetCommMask
CreateWaitableTimerW
GetVersionExA
LoadLibraryExW
ClearCommError
lstrcpyW
OpenSemaphoreW
GetNamedPipeInfo
CreateEventA
LoadLibraryW
FindClose
user32
EnumDisplaySettingsExW
GetLastActivePopup
SetActiveWindow
ScreenToClient
GetSystemMenu
GetNextDlgGroupItem
GetDlgItemInt
SendNotifyMessageW
UnloadKeyboardLayout
GetScrollRange
GetDC
DrawFocusRect
ScrollDC
GetKeyboardLayout
LoadMenuW
DestroyCursor
EnumPropsExW
SetMenu
DrawMenuBar
SetCaretBlinkTime
AdjustWindowRect
MessageBoxExW
DefWindowProcW
DefFrameProcW
GetWindow
SendMessageTimeoutW
gdi32
LPtoDP
GetEnhMetaFileDescriptionW
GetRandomRgn
CloseMetaFile
GetTextFaceW
SaveDC
GetCharABCWidthsW
GetTextExtentExPointW
CreateCompatibleDC
GetMetaFileBitsEx
FillPath
SetStretchBltMode
UpdateColors
advapi32
SetAclInformation
AddAuditAccessAceEx
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.secimg Size: 1024B - Virtual size: 597B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.memo0 Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_mem Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.datse Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 886B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ