Static task
static1
Behavioral task
behavioral1
Sample
bd0f8581ca4ccfafd9a5f377f0ab1d2b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd0f8581ca4ccfafd9a5f377f0ab1d2b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bd0f8581ca4ccfafd9a5f377f0ab1d2b_JaffaCakes118
-
Size
92KB
-
MD5
bd0f8581ca4ccfafd9a5f377f0ab1d2b
-
SHA1
8106b3569d254b79f7a773b5521cb2a323df0c05
-
SHA256
11b0bbb4c81e10c278392dc748ef26fb49b6da2ea3bd9ba3ac62b2b3558f2a0f
-
SHA512
b3061064940c1475466eacd210f8e203f4a279452d4721f0aca2d9de7ecda6b4e874e3b725db35bc2ca5377d5126de4b1d44a0f31fa60c8e650cea13dcc09c80
-
SSDEEP
1536:HUOofNfsNaQrX6hYWIpDLGUgUhq6mwbzRC0ERlEPF653eLVBepmY:HURfs0QmYDLGUvdNAEPk3AYN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd0f8581ca4ccfafd9a5f377f0ab1d2b_JaffaCakes118
Files
-
bd0f8581ca4ccfafd9a5f377f0ab1d2b_JaffaCakes118.dll windows:4 windows x86 arch:x86
83e0944dde02996b4fa28726519f0bac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comdlg32
ChooseColorW
ChooseFontW
CommDlgExtendedError
FindTextA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
PrintDlgExA
PrintDlgW
dwLBSubclass
dwOKSubclass
user32
GetScrollInfo
GetSubMenu
GetUserObjectSecurity
GetWindowRect
LoadAcceleratorsA
MoveWindow
RemoveMenu
SendMessageTimeoutA
SetClassLongA
SetPropA
SetTimer
SetWindowLongA
kernel32
GetUserDefaultLangID
GetStartupInfoA
GetOEMCP
GetModuleHandleA
GetLogicalDrives
GetComputerNameA
GetCommandLineA
GetACP
FindResourceExW
FindFirstChangeNotificationA
FatalAppExitW
ExitProcess
EnumSystemLanguageGroupsA
lstrcmpiW
WritePrivateProfileStructA
WaitNamedPipeW
VirtualProtect
TerminateJobObject
RtlFillMemory
PulseEvent
OpenMutexA
HeapCreate
HeapAlloc
GlobalUnfix
GetVersionExA
CloseHandle
EnumResourceNamesW
GetUserDefaultLCID
ole32
CoCreateInstance
dbghelp
SymMatchFileName
FindFileInPath
GetTimestampForLoadedLibrary
MiniDumpReadDumpStream
MiniDumpWriteDump
SymEnumSourceFiles
SymEnumerateSymbolsW
SymGetLinePrev
SymGetModuleInfoW64
SymGetSymPrev64
SymLoadModule64
comctl32
CreateUpDownControl
FlatSB_GetScrollProp
FlatSB_GetScrollRange
ImageList_DrawIndirect
ImageList_LoadImageA
ImageList_Read
ImageList_ReplaceIcon
ImageList_SetOverlayImage
InitCommonControlsEx
InitMUILanguage
InitializeFlatSB
CreateStatusWindowW
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ