Static task
static1
Behavioral task
behavioral1
Sample
b462440d204fa5dcc41e7a97c7caa4e5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b462440d204fa5dcc41e7a97c7caa4e5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b462440d204fa5dcc41e7a97c7caa4e5_JaffaCakes118
-
Size
93KB
-
MD5
b462440d204fa5dcc41e7a97c7caa4e5
-
SHA1
546b58031179f5dfc821d249c9fd7c4f9543732e
-
SHA256
40e9abc81d373b7a7d0ec0da0a7dc1b3df462444d3a7299f44e87d23d603cb84
-
SHA512
759215f3711157319118cb134b87d7b3539eb3bd2348bb953881b3ad329f444d7f5a49059c6e014b611064b29890c3b1fb0c94caae2f8b856711e6714c2f470e
-
SSDEEP
1536:Ba3I3AzWHWUYe3wgKh6/69QR4WboU0Yi5HPsBD8WpgaZLKq0fvlxosn7u6ybgu:BII3FHW9e3HQ6/6CRghHwwWS4G/lxRnz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b462440d204fa5dcc41e7a97c7caa4e5_JaffaCakes118
Files
-
b462440d204fa5dcc41e7a97c7caa4e5_JaffaCakes118.dll windows:4 windows x86 arch:x86
4f1ec3efb20f5026a23dd7efab48dd2b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryExW
GetModuleFileNameA
GetModuleFileNameW
CreateFileA
GetProcAddress
CreateDirectoryA
CreateDirectoryW
LCMapStringA
LCMapStringW
GetFileAttributesA
GetFileAttributesW
LocalFree
LocalAlloc
FormatMessageA
InterlockedExchange
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedDecrement
InterlockedIncrement
LoadLibraryExA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
FindClose
SizeofResource
LoadResource
LockResource
WriteFile
CloseHandle
DisableThreadLibraryCalls
GetVersionExA
FreeLibrary
CreateThread
lstrcpyW
FindResourceW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
GetModuleHandleW
GetModuleHandleA
InterlockedCompareExchange
CompareStringW
VirtualProtect
lstrlenW
GetCommandLineA
user32
GetMenuItemID
SetCapture
InvalidateRect
GetSystemMetrics
SetCursor
MapWindowPoints
ScreenToClient
GetWindowRect
TrackPopupMenu
EnableMenuItem
IsIconic
IsWindow
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetClientRect
GetFocus
GetSubMenu
DestroyMenu
GetMenuItemCount
CreatePopupMenu
CheckMenuRadioItem
LoadMenuW
LoadMenuA
SetDlgItemTextW
SetDlgItemTextA
DefWindowProcW
DefWindowProcA
PostMessageW
GetWindowLongW
GetWindowLongA
SetWindowLongW
GetMenuItemInfoW
GetMenuItemInfoA
InsertMenuW
InsertMenuA
SendMessageW
SendMessageA
OpenInputDesktop
CloseDesktop
GetParent
DestroyIcon
GetDlgItemInt
SetDlgItemInt
GetDlgItem
GetDC
ReleaseDC
ShowWindow
MessageBeep
DeleteMenu
GetMenuState
GetDesktopWindow
SetFocus
CreateMenu
CreateWindowExA
CreateWindowExW
LoadImageA
LoadImageW
LoadIconA
LoadIconW
MessageBoxA
MessageBoxW
LoadStringW
LoadStringA
SendDlgItemMessageW
LoadCursorW
LoadCursorA
ReleaseCapture
advapi32
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RevertToSelf
RegOpenKeyExA
RegCloseKey
gdi32
GetTextExtentPointW
ole32
RegisterDragDrop
msvcrt
_adjust_fdiv
malloc
_initterm
free
_amsg_exit
_XcptFilter
_except_handler3
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ