Static task
static1
Behavioral task
behavioral1
Sample
b4cf48fc6c5678352b4769ffe005da91_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b4cf48fc6c5678352b4769ffe005da91_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b4cf48fc6c5678352b4769ffe005da91_JaffaCakes118
-
Size
88KB
-
MD5
b4cf48fc6c5678352b4769ffe005da91
-
SHA1
a02c145f47b1e5e9c14e4c9c4686874d1323b6e2
-
SHA256
a5486265c1bdbaaeaa646b783d378d452dd6d6ea195d371b0fadb4ae8bd7c1de
-
SHA512
be2bd4aee3cdb116a70a0ecf2cfc6c12d3065f8eb05999dfcd5a5eabba407635529a592bbc4f7bb59f4fea34886d20ed15c1c183f1a3d6c60428c93300e39f76
-
SSDEEP
1536:RfcrpQCXMp7t96b6ayQvxY+IgJXwk1VRuzW69CCM90J:Rf5CGt9+1BpY+nJXyXI3s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4cf48fc6c5678352b4769ffe005da91_JaffaCakes118
Files
-
b4cf48fc6c5678352b4769ffe005da91_JaffaCakes118.dll windows:4 windows x86 arch:x86
83e0944dde02996b4fa28726519f0bac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comdlg32
ChooseColorW
ChooseFontW
CommDlgExtendedError
FindTextA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
PrintDlgExA
PrintDlgW
dwLBSubclass
dwOKSubclass
user32
GetScrollInfo
GetSubMenu
GetUserObjectSecurity
GetWindowRect
LoadAcceleratorsA
MoveWindow
RemoveMenu
SendMessageTimeoutA
SetClassLongA
SetPropA
SetTimer
SetWindowLongA
kernel32
GetUserDefaultLangID
GetStartupInfoA
GetOEMCP
GetModuleHandleA
GetLogicalDrives
GetComputerNameA
GetCommandLineA
GetACP
FindResourceExW
FindFirstChangeNotificationA
FatalAppExitW
ExitProcess
EnumSystemLanguageGroupsA
lstrcmpiW
WritePrivateProfileStructA
WaitNamedPipeW
VirtualProtect
TerminateJobObject
RtlFillMemory
PulseEvent
OpenMutexA
HeapCreate
HeapAlloc
GlobalUnfix
GetVersionExA
CloseHandle
EnumResourceNamesW
GetUserDefaultLCID
ole32
CoCreateInstance
dbghelp
SymMatchFileName
FindFileInPath
GetTimestampForLoadedLibrary
MiniDumpReadDumpStream
MiniDumpWriteDump
SymEnumSourceFiles
SymEnumerateSymbolsW
SymGetLinePrev
SymGetModuleInfoW64
SymGetSymPrev64
SymLoadModule64
comctl32
CreateUpDownControl
FlatSB_GetScrollProp
FlatSB_GetScrollRange
ImageList_DrawIndirect
ImageList_LoadImageA
ImageList_Read
ImageList_ReplaceIcon
ImageList_SetOverlayImage
InitCommonControlsEx
InitMUILanguage
InitializeFlatSB
CreateStatusWindowW
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ