Static task
static1
Behavioral task
behavioral1
Sample
a796cdbc7298e73d967ae26a40e8883a_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a796cdbc7298e73d967ae26a40e8883a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a796cdbc7298e73d967ae26a40e8883a_JaffaCakes118
-
Size
80KB
-
MD5
a796cdbc7298e73d967ae26a40e8883a
-
SHA1
57cb35dd9a7555cb464a6637264469498a558442
-
SHA256
31c7759228aaddb4fc6b82fad53c2de4d4814a240c42f6507e94afda43baa180
-
SHA512
828c3f616ff8c6cef75b17b6bd1ec4873a461d11bacbb15445818307090100c1b153c752040adad7378e91fc53f5d5ba99ddf09c0167eaf832483c46fe186909
-
SSDEEP
1536:lI1GZZUFwWtoTiGt+N98CLnc0kvqAksrFOgXz/kSWaFPA4EcZRtWXta:UWW6TiGt+NiCLncJBAguo7t0a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a796cdbc7298e73d967ae26a40e8883a_JaffaCakes118
Files
-
a796cdbc7298e73d967ae26a40e8883a_JaffaCakes118.dll windows:4 windows x86 arch:x86
7e5d39c8e0b3a087afb9b2f2b9c21140
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
BackupRead
CloseHandle
CreateConsoleScreenBuffer
DisconnectNamedPipe
ExitProcess
FindFirstVolumeA
FindVolumeMountPointClose
GetACP
GetAtomNameA
GetCommandLineA
GetCurrentThread
GetDiskFreeSpaceW
GetFileSizeEx
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcessVersion
GetStartupInfoA
GetTickCount
GetVersionExA
GlobalGetAtomNameW
HeapAlloc
HeapCreate
IsBadWritePtr
LoadLibraryExA
MoveFileExA
ReadFileScatter
SetEnvironmentVariableA
SetEnvironmentVariableW
SetHandleInformation
SetLastError
SetTimeZoneInformation
WriteFile
user32
ShowWindow
SendMessageTimeoutA
ReleaseDC
OpenClipboard
MoveWindow
MessageBoxA
InflateRect
GetParent
GetMenuItemID
GetFocus
GetDoubleClickTime
FrameRect
DrawFrameControl
DrawEdge
DialogBoxParamA
DefWindowProcA
CreateDialogParamA
CheckMenuItem
BeginDeferWindowPos
OffsetRect
msi
MsiSummaryInfoSetPropertyW
MsiSummaryInfoPersist
MsiSourceListClearAllA
MsiRecordSetStreamW
MsiProvideComponentA
MsiProcessAdvertiseScriptW
MsiLocateComponentW
MsiGetShortcutTargetA
MsiGetFeatureUsageA
MsiEnumPatchesW
MsiEnumComponentQualifiersA
MsiEnumClientsW
MsiApplyPatchW
MsiAdvertiseProductExA
MsiVerifyPackageA
oleacc
GetStateTextA
AccessibleObjectFromEvent
oledlg
OleUIInsertObjectA
OleUIAddVerbMenuA
OleUICanConvertOrActivateAs
OleUIChangeIconA
OleUIConvertA
odbc32
SQLColAttributesA
SQLBindParam
PostODBCError
SQLColumnsA
SQLDisconnect
SQLDriverConnectA
SQLErrorA
SQLFreeConnect
SQLGetCursorNameA
SQLGetData
SQLGetDiagFieldW
SQLGetStmtAttrA
SQLMoreResults
SQLNativeSqlA
SQLPrimaryKeysA
SQLSetCursorNameA
SQLSetEnvAttr
SQLTablePrivilegesA
Sections
.text Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ