Static task
static1
Behavioral task
behavioral1
Sample
b544a9e8041372e939e34a5b95759ea7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b544a9e8041372e939e34a5b95759ea7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b544a9e8041372e939e34a5b95759ea7_JaffaCakes118
-
Size
26KB
-
MD5
b544a9e8041372e939e34a5b95759ea7
-
SHA1
f9797bb2c542d4561d6ac5ff07201ce0689aab07
-
SHA256
8ec1a342a3bbc848f2579e00e3fa388bb067cb9c89ce4e53598dbcf436f424c0
-
SHA512
3c58696f5512ea8b27360a18885f71c9a5c52f96025e0ca5f457a6ee0441efac5574b76fc8fc6bea8c184718c241b13654a7a9d6038f0565c9b7019dbc3fbece
-
SSDEEP
384:siOcZOh18mUyRsKBsS5pbSjNW8uIhg4BqWh1vWwbI:siOc8halSsS5p2IX2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b544a9e8041372e939e34a5b95759ea7_JaffaCakes118
Files
-
b544a9e8041372e939e34a5b95759ea7_JaffaCakes118.dll windows:5 windows x86 arch:x86
6463ee2f65351fce52ffe5f7a330a5e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetWindowsDirectoryW
CreateFileW
LoadLibraryA
GetProcAddress
lstrcatW
VirtualAlloc
IsDebuggerPresent
user32
DrawCaption
DrawFocusRect
DrawMenuBar
EnumDisplayDevicesW
EnumDisplaySettingsA
EnumDisplaySettingsW
EnumPropsExA
EnumWindows
FindWindowA
FindWindowExA
FindWindowW
FlashWindow
GetAncestor
GetCaretPos
GetClassNameA
GetClientRect
GetCursorInfo
GetDesktopWindow
GetKeyboardLayout
GetKeyboardState
GetMenuStringW
GetNextDlgGroupItem
GetNextDlgTabItem
GetParent
GetPriorityClipboardFormat
GetQueueStatus
GetShellWindow
GetSysColor
GetTopWindow
GetUpdateRect
GetWindowModuleFileName
HiliteMenuItem
DlgDirSelectExW
InvalidateRect
IsMenu
IsWindow
LoadCursorFromFileW
LoadKeyboardLayoutW
LoadStringA
LockWorkStation
LookupIconIdFromDirectory
MapVirtualKeyW
MessageBoxA
MessageBoxIndirectA
NotifyWinEvent
OemToCharA
OpenDesktopW
OpenIcon
PaintDesktop
RealGetWindowClassA
RegisterClassA
RegisterClipboardFormatW
RegisterWindowMessageA
ReplyMessage
SendMessageW
SetClassLongW
SetCursorPos
SetDeskWallpaper
SetMenuDefaultItem
SetShellWindow
SetWinEventHook
SetWindowRgn
SetWindowsHookExA
SetWindowsHookW
ShowOwnedPopups
ShowWindow
UnhookWindowsHookEx
UnpackDDElParam
ValidateRect
VkKeyScanExW
VkKeyScanW
keybd_event
DlgDirSelectComboBoxExW
DestroyMenu
DefMDIChildProcA
DefFrameProcW
DdeSetQualityOfService
DdeQueryConvInfo
DdeNameService
DdeInitializeW
DdeFreeDataHandle
DdeCreateDataHandle
CreateCursor
CountClipboardFormats
CloseWindow
ClipCursor
CheckMenuRadioItem
CharUpperBuffA
CharPrevW
CharLowerW
BringWindowToTop
AttachThreadInput
AdjustWindowRect
IMPQueryIMEW
comctl32
InitializeFlatSB
CreatePropertySheetPageA
ord6
CreateStatusWindowW
DrawStatusText
FlatSB_GetScrollProp
ImageList_Copy
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_Duplicate
ImageList_EndDrag
ImageList_LoadImageA
ImageList_Read
CreatePropertySheetPage
ImageList_SetImageCount
Sections
.text2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ