Static task
static1
Behavioral task
behavioral1
Sample
aa2948b87bbf5a2185f2ce54fba10129_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa2948b87bbf5a2185f2ce54fba10129_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
aa2948b87bbf5a2185f2ce54fba10129_JaffaCakes118
-
Size
71KB
-
MD5
aa2948b87bbf5a2185f2ce54fba10129
-
SHA1
22418767f0e0db7b433c6a4ab2d6970ca7dd007c
-
SHA256
1316f212b3a73442e32f6042c452204d5172ae1f32a5c327371b9c0585bf74e6
-
SHA512
171253601a5c5ebbe1122458fce5a58af32fa4b0463b5fd93443a53be4e710600534bbf9c18d0c8e89bfa13765d6e8851b43018514c220a394b1e1b064ffbc97
-
SSDEEP
1536:QCA6fKyeBD3oaPJ0lwKuNAC8YQihVIHLisvY5FWb2LC2F7rNLP6Omu:9xKxAk2C8eaigMFQ2LC2FBP6Ov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa2948b87bbf5a2185f2ce54fba10129_JaffaCakes118
Files
-
aa2948b87bbf5a2185f2ce54fba10129_JaffaCakes118.dll windows:4 windows x86 arch:x86
ea38a622b92185f85b2d80e659b4f192
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FormatMessageW
LocalFree
DeleteCriticalSection
CloseHandle
WaitForMultipleObjects
WaitForSingleObject
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
ResetEvent
InterlockedExchange
lstrlenW
CompareStringW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
CreateThread
InterlockedCompareExchange
ReleaseMutex
VirtualProtect
GetLastError
CreateEventW
SetEvent
GlobalFree
EnterCriticalSection
LeaveCriticalSection
GlobalAlloc
GetCurrentProcessId
InitializeCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
GetComputerNameW
GetComputerNameA
SetLastError
QueryDosDeviceW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
DisableThreadLibraryCalls
GetVersion
GetCommandLineA
QueryPerformanceCounter
user32
LoadStringW
ShowWindow
GetSysColor
MessageBoxW
LoadIconW
MapWindowPoints
IsWindowEnabled
GetWindowLongW
IsDlgButtonChecked
GetSystemMetrics
SetDlgItemTextW
GetWindowTextW
MoveWindow
DrawTextW
GetWindowRect
SetRect
FillRect
GetDlgItem
ReleaseDC
GetDC
GetClientRect
SendMessageW
SystemParametersInfoW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
RegSetValueExW
RegEnumKeyExW
ReportEventW
LsaNtStatusToWinError
SetServiceStatus
RegisterServiceCtrlHandlerW
DeregisterEventSource
StartServiceCtrlDispatcherW
RegisterEventSourceW
RegNotifyChangeKeyValue
AddAccessAllowedAceEx
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetSecurityDescriptorLength
MakeSelfRelativeSD
FreeSid
AdjustTokenPrivileges
OpenProcessToken
CloseServiceHandle
gdi32
SelectObject
CreateSolidBrush
SetTextColor
GetStockObject
ole32
CoTaskMemFree
CoCreateInstance
rpcrt4
RpcServerListen
RpcServerRegisterIf
RpcServerUseProtseqEpW
RpcRevertToSelf
RpcImpersonateClient
RpcMgmtStopServerListening
RpcMgmtWaitServerListen
msvcrt
malloc
_adjust_fdiv
_initterm
free
_vsnwprintf
_wtoi
abort
_iob
fprintf
memcpy
memset
_beginthreadex
_wcsicmp
wcsncmp
towupper
_cexit
_XcptFilter
exit
_amsg_exit
wcsrchr
_wtol
_except_handler3
time
localtime
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ