__GetWindowTextLengthA@12
Static task
static1
Behavioral task
behavioral1
Sample
bf20b80dc0289edaa27cff47dcff06c0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bf20b80dc0289edaa27cff47dcff06c0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bf20b80dc0289edaa27cff47dcff06c0_JaffaCakes118
-
Size
148KB
-
MD5
bf20b80dc0289edaa27cff47dcff06c0
-
SHA1
c5981da6b9d6e8846afe0ba7aeef65dbaf8a980d
-
SHA256
172ba9b01e9839b104a238f33ee16e36a0fdf3f677f46d90ebcb64ccdf1a7298
-
SHA512
2ff17f6656d4375c13e8774d06e152bf2844ce0e0c805a9abf5ea0c32a5514ef6a31a7d37609fcf96fb2a4a612b83c9cf3ab1d2473afaa5598a5fb2d06144a3f
-
SSDEEP
3072:5AwYIp1mvc1Bj7wWO76dQsk/VEvRo+iv3+P5oKVFgwNU7YIdERkyzAadG:D1mvc1BwnmNkNEvwGeK8SbG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf20b80dc0289edaa27cff47dcff06c0_JaffaCakes118
Files
-
bf20b80dc0289edaa27cff47dcff06c0_JaffaCakes118.dll windows:5 windows x86 arch:x86
1c4d9f7b6f7e468f403d97374fb85eec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
StrFormatKBSizeW
PathUndecorateA
StrPBrkA
ChrCmpIA
PathCompactPathA
shell32
ord147
kernel32
lstrcmpA
SetEndOfFile
GetCommProperties
GetSystemPowerStatus
LockFileEx
FileTimeToDosDateTime
OpenSemaphoreW
CloseHandle
GetProfileSectionW
GetCommandLineW
CreateMutexA
QueueUserAPC
QueryDosDeviceA
LoadLibraryExW
lstrcpyA
OpenMutexA
LoadLibraryA
GetNamedPipeInfo
OpenSemaphoreA
DeleteTimerQueue
user32
RedrawWindow
GetDlgItem
EnableMenuItem
GetClassNameW
PeekMessageW
ChangeDisplaySettingsExA
SetSysColors
GetDC
GetIconInfo
wsprintfW
DrawTextExW
WaitForInputIdle
RemovePropA
LoadCursorW
KillTimer
GetWindowDC
LoadMenuIndirectA
GetWindowTextLengthW
UnloadKeyboardLayout
GetRawInputDeviceInfoW
GetMenuStringA
IsDlgButtonChecked
GetMenuContextHelpId
CreateCaret
ClipCursor
DispatchMessageA
GetMenuInfo
GetSystemMetrics
IsWindowVisible
SetCaretPos
SendMessageW
SetScrollInfo
GetScrollPos
GetMessageTime
TabbedTextOutW
UpdateWindow
GetWindow
WindowFromDC
gdi32
GetEnhMetaFileBits
CreatePolygonRgn
Chord
SetPolyFillMode
GetPolyFillMode
CreateCompatibleBitmap
EndPath
SetBrushOrgEx
GetDeviceCaps
GetTextMetricsW
GetTextExtentPoint32W
SetLayout
SetTextJustification
GetCharABCWidthsA
RoundRect
advapi32
IsValidAcl
AddAccessDeniedAce
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.image Size: 1024B - Virtual size: 597B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.memo0 Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_mem Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.datse Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ