DirectMousedrv
Static task
static1
Behavioral task
behavioral1
Sample
b5ba0f1718e2e2ff2debff0f435b8a7a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b5ba0f1718e2e2ff2debff0f435b8a7a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b5ba0f1718e2e2ff2debff0f435b8a7a_JaffaCakes118
-
Size
84KB
-
MD5
b5ba0f1718e2e2ff2debff0f435b8a7a
-
SHA1
4f85a9a75e20732836121996eaea2da9e8f5546d
-
SHA256
ba76d77fad309d664ed09e4a838cd3ae97a9eccd21b870682804e296f81362d4
-
SHA512
46d18218018b9650f2aecfa58b253649543b0fbdbe58fb89fb3f1ecc7094192e78fa80e12c4d511f9aca1d05124e84c0292fef32d4f0ebdb1d0fe458a2772a87
-
SSDEEP
1536:ajQdzYvJnib6dLpSXhxIggweiAb9bCz7gX/v:pmvJ1Lp8ItweiAb9bCfgn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5ba0f1718e2e2ff2debff0f435b8a7a_JaffaCakes118
Files
-
b5ba0f1718e2e2ff2debff0f435b8a7a_JaffaCakes118.dll windows:4 windows x86 arch:x86
79060191b65f47244e0fc601e8eeb794
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CompareFileTime
ResumeThread
GetFileSize
LocalUnlock
GetDiskFreeSpaceW
VerLanguageNameW
GetLocaleInfoA
FindFirstVolumeMountPointW
LoadResource
GetFileInformationByHandle
SetFileAttributesA
LocalFileTimeToFileTime
GetBinaryTypeW
FindFirstFileExW
GetDiskFreeSpaceExW
GetSystemDefaultUILanguage
CreateNamedPipeW
GetFileType
SetVolumeMountPointW
CallNamedPipeA
GetCommConfig
GetExitCodeProcess
EscapeCommFunction
GetCurrentThreadId
GetNumberFormatW
OpenThread
OpenSemaphoreA
CreateSemaphoreA
GetExitCodeThread
lstrcpyA
AllocConsole
DeleteFileA
CancelWaitableTimer
SetCommMask
lstrcpynW
SetConsoleCursorPosition
DisconnectNamedPipe
BackupWrite
IsProcessorFeaturePresent
WriteProfileStringW
SizeofResource
BackupRead
HeapSize
RtlUnwind
ConnectNamedPipe
GetProfileSectionA
SetConsoleWindowInfo
OpenFile
SetMailslotInfo
FormatMessageW
GetTempPathA
GetOverlappedResult
ExpandEnvironmentStringsW
GetEnvironmentVariableW
FillConsoleOutputAttribute
GlobalDeleteAtom
GlobalFindAtomA
GetFileAttributesW
AddAtomW
DosDateTimeToFileTime
DuplicateHandle
FlushConsoleInputBuffer
CompareStringA
GetVersionExA
AreFileApisANSI
SetComputerNameExW
QueueUserWorkItem
EndUpdateResourceA
FindFirstChangeNotificationW
DeleteVolumeMountPointW
DnsHostnameToComputerNameW
GetSystemDefaultLangID
DeleteFileW
GlobalReAlloc
HeapCompact
GetDateFormatA
OpenFileMappingW
IsDBCSLeadByte
FindActCtxSectionStringW
WideCharToMultiByte
GetComputerNameW
ExitProcess
lstrlenW
CreateDirectoryA
UnmapViewOfFile
lstrlenA
LoadLibraryA
GetSystemDirectoryA
InterlockedCompareExchange
WaitForSingleObject
HeapFree
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
CreateProcessA
MapViewOfFile
CloseHandle
InterlockedExchange
GetProcessHeap
GetComputerNameA
HeapAlloc
GetLastError
WriteFile
LeaveCriticalSection
GetVolumeInformationA
CreateFileA
InterlockedIncrement
GetCurrentProcessId
TerminateProcess
GetProcAddress
shlwapi
SHSetValueA
StrCpyNW
StrToIntA
PathIsPrefixW
StrCmpW
StrFormatKBSizeW
PathSkipRootW
PathBuildRootW
PathStripToRootW
StrCpyW
UrlGetPartW
UrlEscapeW
SHGetValueA
SHDeleteKeyA
StrStrA
PathCombineW
PathQuoteSpacesW
StrToIntExW
PathAddBackslashA
UrlCanonicalizeW
UrlCombineW
wvnsprintfW
SHRegSetPathW
StrStrIW
UrlUnescapeW
gdi32
EnumFontFamiliesExA
GetTextMetricsW
CreateEnhMetaFileW
Arc
ResizePalette
EnumEnhMetaFile
CreateRoundRectRgn
GetTextFaceW
CreateEnhMetaFileA
GetCharacterPlacementA
SetSystemPaletteUse
CreateHalftonePalette
SetROP2
GetSystemPaletteUse
CopyMetaFileA
CloseEnhMetaFile
SetICMMode
ExtCreatePen
GetTextExtentPointA
GetPath
CreateDCW
CreatePatternBrush
SetBitmapDimensionEx
CreateICW
GetCharWidthW
DeleteObject
PolyPolygon
EnumMetaFile
GetCharWidthA
GetCurrentPositionEx
DPtoLP
PolyPolyline
CreatePenIndirect
UnrealizeObject
GetBrushOrgEx
PlayMetaFile
GetObjectA
GetCharWidth32W
FillPath
SetBitmapBits
GetDIBits
CreateDiscardableBitmap
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ