EnumTvValueRelease
Static task
static1
Behavioral task
behavioral1
Sample
bc00408dfd5132f2699e2784c6610bb8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc00408dfd5132f2699e2784c6610bb8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bc00408dfd5132f2699e2784c6610bb8_JaffaCakes118
-
Size
224KB
-
MD5
bc00408dfd5132f2699e2784c6610bb8
-
SHA1
624318693007dfbe4e0ac865aed5540471e809cc
-
SHA256
00bd1f425dbe7517a2c127964d26eac00513e56854e4e73f4c1af60fd0b5b731
-
SHA512
58580b9faa3f689b7e50d220aba2035754ec163a7975277f668be0ef30908fd0112f080cbb9a8b998f864a7d85f1890a89b06eff2bccd67a5564d283b295f4a5
-
SSDEEP
3072:wXqJzYGiouqKTSQmX59GlNkVYn05C5ky1YemIA+Zqfuk0DIOLOsx9cQdBvt5W8Qp:wAHi9qoPQ59GMYn0rAEWpDIOqTwTal
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc00408dfd5132f2699e2784c6610bb8_JaffaCakes118
Files
-
bc00408dfd5132f2699e2784c6610bb8_JaffaCakes118.dll windows:4 windows x86 arch:x86
9bb238df753c808decfde2b8a82e8ab6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CompareStringA
ExitProcess
ExpandEnvironmentStringsA
FileTimeToSystemTime
FindClose
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThread
GetDateFormatA
GetEnvironmentStringsA
GetExitCodeThread
GetFileAttributesA
GetFileTime
GetFileType
GetLastError
GetModuleHandleA
GetStringTypeW
GetSystemDirectoryA
GetTickCount
GetVersionExA
HeapAlloc
HeapCreate
IsValidLocale
LocalAlloc
OutputDebugStringA
SetEndOfFile
Sleep
UnmapViewOfFile
WaitForMultipleObjects
lstrcatA
lstrcmpiA
lstrlenA
advapi32
CheckTokenMembership
CryptSetProviderA
GetSecurityDescriptorOwner
LookupAccountNameW
LsaCreateSecret
OpenBackupEventLogA
OpenThreadToken
QueryServiceObjectSecurity
ReadEventLogW
user32
OffsetRect
MsgWaitForMultipleObjects
GetWindowThreadProcessId
GetWindowPlacement
GetWindow
GetSystemMetrics
GetSysColorBrush
GetSubMenu
FrameRect
DialogBoxIndirectParamA
DestroyWindow
RedrawWindow
DefMDIChildProcA
ole32
IsEqualGUID
CreateOleAdviseHolder
CoCreateInstance
ddraw
DirectDrawEnumerateW
DirectDrawEnumerateA
DirectDrawCreateEx
DirectDrawCreate
DDInternalUnlock
DDInternalLock
GetSurfaceFromDC
Exports
Exports
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ