Static task
static1
Behavioral task
behavioral1
Sample
ab7509da331b5b486749a7ad594e534d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ab7509da331b5b486749a7ad594e534d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ab7509da331b5b486749a7ad594e534d_JaffaCakes118
-
Size
135KB
-
MD5
ab7509da331b5b486749a7ad594e534d
-
SHA1
51a6a09ad0ca2f6ed112cc908e036901789ad59d
-
SHA256
276636730fff608e347537f06218da6285bb441aa1d004328e9b89caa3a5bc4a
-
SHA512
08fbaa308de1dd0183298e097146aadbd9e90afab865fefbe3fb819c5132db9db1ad2bbe1165332247c6c513723ad8f589884fba82e58523a5f3170b98a397bb
-
SSDEEP
1536:9FbGWanXt7ZiNL70vY6BxSF5NQ/MHH4hF3geOecMxkIidwML2EtPfo:r0Xt7E+hBxSa/MHHOF3g7QxIL2ES
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab7509da331b5b486749a7ad594e534d_JaffaCakes118
Files
-
ab7509da331b5b486749a7ad594e534d_JaffaCakes118.dll windows:4 windows x86 arch:x86
19a61f60717256b6521f559be76dacde
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FindFirstFileA
OpenFileMappingA
CopyFileExA
GetCPInfo
GetFileSize
ExitThread
GetComputerNameA
GlobalFree
CopyFileExW
DeleteFileW
CopyFileA
GetStdHandle
WriteFile
GetFileTime
GetFileTime
CopyFileW
CreateThread
ReadConsoleA
Sleep
ReadFile
CopyFileA
CopyFileExW
GetCommandLineA
CreateDirectoryA
CopyFileExA
GetComputerNameA
SetLastError
GlobalFree
CreateDirectoryA
ReadFile
CopyFileA
DeleteAtom
DeleteFileW
GlobalFree
SetLastError
FindFirstFileA
CreateProcessA
ReadConsoleA
GetLastError
Sleep
GetConsoleMode
GetFileTime
CreateThread
gdi32
AddFontResourceTracking
ClearBitmapAttributes
GetPixel
GetDCOrgEx
CopyMetaFileA
AbortPath
AddFontResourceA
CancelDC
BitBlt
GetClipBox
CreateSolidBrush
GetCurrentPositionEx
AddFontResourceW
ExcludeClipRect
GetBitmapBits
ClearBrushAttributes
AddFontResourceExW
RestoreDC
AddFontResourceExW
ExcludeClipRect
GetBitmapBits
CreateSolidBrush
ClearBrushAttributes
AddFontResourceW
SetTextColor
RestoreDC
ClearBitmapAttributes
AddFontResourceExA
AddFontMemResourceEx
BeginPath
AddFontResourceTracking
AddFontResourceExA
BeginPath
BitBlt
ClearBrushAttributes
GetCurrentPositionEx
CreateSolidBrush
CloseFigure
AddFontResourceTracking
AddFontResourceA
GetPixel
ExtTextOutA
GetBitmapBits
CloseMetaFile
DeleteObject
CancelDC
comctl32
ImageList_Destroy
ImageList_Draw
ImageList_DrawEx
ImageList_GetImageCount
ImageList_DragLeave
ImageList_Remove
ImageList_DrawIndirect
ImageList_EndDrag
ImageList_Read
ImageList_Merge
user32
CloseWindow
IsMenu
CopyImage
EndDialog
LoadMenuA
GetWindowTextA
GetWindowTextLengthA
AlignRects
DrawTextA
CalcMenuBar
DrawIconEx
CreateIcon
DialogBoxParamW
GetDlgItem
advapi32
RegCreateKeyExW
RegReplaceKeyW
RegDeleteValueA
RegLoadKeyW
RegQueryValueW
RegOpenKeyW
RegGetKeySecurity
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryInfoKeyW
RegEnumKeyW
RegQueryValueA
RegDeleteKeyW
RegEnumKeyExA
RegEnumKeyExW
RegFlushKey
RegQueryValueExA
RegReplaceKeyA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 126B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ