Static task
static1
Behavioral task
behavioral1
Sample
afe92c16e7dc0958cfa2fadb6c67be0c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
afe92c16e7dc0958cfa2fadb6c67be0c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
afe92c16e7dc0958cfa2fadb6c67be0c_JaffaCakes118
-
Size
108KB
-
MD5
afe92c16e7dc0958cfa2fadb6c67be0c
-
SHA1
a5e70d0fe24187b76bfb675ba8ad658565fc0f5b
-
SHA256
1015c94bff41eca43533685f0ddc0661e4befcc621519a8a9b2a6f361432fe07
-
SHA512
442b0fd80ee59b4e52dc041a579411db704a85d4577c174369d6504a1105eacab9f0030156816eda641b46b8121e43c8d33269cba45a6f921504af685cb2caf6
-
SSDEEP
3072:YPhSgzBZhqVdJW0eWa2J6XS1ONlXxNRlJB1pzAFYCF5:Y5SndVOXSwNlXxNXPCF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afe92c16e7dc0958cfa2fadb6c67be0c_JaffaCakes118
Files
-
afe92c16e7dc0958cfa2fadb6c67be0c_JaffaCakes118.dll windows:4 windows x86 arch:x86
b0d97773729cd1ce44e61d0ff0516e28
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
UpdateWindow
ShowWindow
SetSystemCursor
RegisterClassA
PeekMessageA
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxW
GetTopWindow
GetKeyState
GetForegroundWindow
GetCaretPos
EnumPropsA
EmptyClipboard
DispatchMessageA
DialogBoxParamA
DefWindowProcA
CreateWindowExA
CharLowerBuffA
BeginDeferWindowPos
advapi32
FileEncryptionStatusA
GetAce
SetUserFileEncryptionKey
SetSecurityDescriptorDacl
RegisterEventSourceA
RegQueryValueExA
OpenTraceW
LsaSetInformationTrustedDomain
LsaRemoveAccountRights
LookupPrivilegeNameW
I_ScSetServiceBitsA
GetSecurityDescriptorDacl
GetAclInformation
AddAccessDeniedAce
ole32
IsEqualGUID
PropVariantClear
shell32
SHGetSpecialFolderPathW
SHFileOperationW
ShellExecuteA
dinput
DirectInputCreateW
kernel32
GetPrivateProfileSectionW
GetModuleHandleA
GetFileAttributesExA
GetCurrentProcessId
GetStringTypeExA
GetSystemDefaultLangID
GetSystemInfo
GetTempPathW
GetTimeZoneInformation
GetVersionExA
GetWindowsDirectoryA
GlobalAddAtomA
HeapAlloc
HeapCreate
MulDiv
OpenEventW
OpenJobObjectW
ReadFile
SetEnvironmentVariableA
lstrcmpA
WaitForMultipleObjectsEx
GetConsoleOutputCP
GetConsoleAliasA
TlsGetValue
GetCommandLineA
SetFileTime
Beep
GetBinaryTypeA
BindIoCompletionCallback
CloseHandle
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnumTimeFormatsA
ExitProcess
FindAtomA
FindAtomW
FindNextVolumeW
FlushConsoleInputBuffer
FormatMessageA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ