Static task
static1
Behavioral task
behavioral1
Sample
bc190edb227c64c82ae7854e7b07f99e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc190edb227c64c82ae7854e7b07f99e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bc190edb227c64c82ae7854e7b07f99e_JaffaCakes118
-
Size
51KB
-
MD5
bc190edb227c64c82ae7854e7b07f99e
-
SHA1
da5d151a2679ae2b863d4baeb1ad91ec0d6b415d
-
SHA256
ca9bc22c0802dab172c4ba7389874c4de20c02122da4e8f2fbf5530d8c3c7b7a
-
SHA512
8041556ef2dc74e79e7a3e99611cd1756e37991d51b40dd9ed81c11d84c1ba5389aec3c387f06dc2cc190075b5c0adaf4f8a1d14194a9088670e6a6398056c2c
-
SSDEEP
768:QZJa1JBU1LcY2B8tR+7wpTxYvEnGwgPheDZUVZjbNf+gcic:sa1JBU1LcJ8z+7ITxyEuheuRXcic
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc190edb227c64c82ae7854e7b07f99e_JaffaCakes118
Files
-
bc190edb227c64c82ae7854e7b07f99e_JaffaCakes118.dll windows:1 windows x86 arch:x86
05e1ae1692e4b2eb8fd4c00aa2e40b17
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
comctl32
ImageList_Destroy
InitCommonControlsEx
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
GetTextMetricsA
MoveToEx
SelectObject
SetBkColor
SetBkMode
SetTextAlign
SetTextColor
kernel32
CloseHandle
CreateFileA
CreateThread
EnumResourceNamesA
ExitProcess
GetCommandLineA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetThreadPriority
GetVersionExA
GlobalAlloc
GlobalFree
LoadLibraryA
MultiByteToWideChar
ReadFile
ResumeThread
SetErrorMode
SetFilePointer
SetLastError
SetThreadPriority
Sleep
SuspendThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
RtlMoveMemory
ole32
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
oleaut32
GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
user32
CallWindowProcA
CharUpperBuffA
CheckRadioButton
ClientToScreen
CreateDialogIndirectParamA
CreateDialogParamA
CreateWindowExA
DestroyIcon
DestroyWindow
DialogBoxIndirectParamA
DispatchMessageA
EnableWindow
FillRect
GetClientRect
GetCursorPos
GetDC
GetDlgItem
GetMenu
GetMenuItemInfoA
GetSysColor
GetSysColorBrush
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
IsDialogMessageA
IsWindow
LoadImageA
MapDialogRect
MessageBoxA
PeekMessageA
PostMessageA
RedrawWindow
ReleaseDC
ScreenToClient
SendMessageA
SetFocus
SetForegroundWindow
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
TranslateMessage
DialogBoxParamA
FindWindowExA
GetFocus
GetWindow
SetTimer
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ