Static task
static1
Behavioral task
behavioral1
Sample
c9768f849c84cb6332722a072d2acbb4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c9768f849c84cb6332722a072d2acbb4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c9768f849c84cb6332722a072d2acbb4_JaffaCakes118
-
Size
130KB
-
MD5
c9768f849c84cb6332722a072d2acbb4
-
SHA1
88bee6adb70fb61375244761014cfe8c5610bd94
-
SHA256
6ab5b8ca36718bb8f520e277f752dca4fddf629db23aa57fce16665967c842d5
-
SHA512
e544afcfbf2b961ecc3accb9fb533e971b6cadda3a1d34d577e73a2f74906f9de0837836375270d05caeb7640d94ac41b652d436a85e0fe4ae89fbb1f172b675
-
SSDEEP
3072:ij+4r9n5FLy0GH3S8Po7mSaiBJT8nEF8nHtqQ6:ij1rl5N8Hi8oySaib8m8nH4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9768f849c84cb6332722a072d2acbb4_JaffaCakes118
Files
-
c9768f849c84cb6332722a072d2acbb4_JaffaCakes118.dll windows:4 windows x86 arch:x86
190bee5acfb60cd015146d6b9814404d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetLocalTime
GetLastError
GlobalFree
CreateThread
InterlockedDecrement
lstrcmpiW
GlobalLock
WriteFile
HeapFree
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GlobalUnlock
FormatMessageA
GetVersionExA
EnumCalendarInfoA
TerminateProcess
LoadLibraryA
FreeEnvironmentStringsW
ExitProcess
msvcrt
_wtol
islower
wcstok
strchr
strcpy
wcscmp
_wcsicmp
free
_adjust_fdiv
iswascii
memcpy
_acmdln
memset
__set_app_type
__getmainargs
wcstol
__dllonexit
_vsnprintf
wcscat
mbtowc
wcslen
swprintf
fclose
atol
user32
OemKeyScan
FrameRect
CharUpperW
SystemParametersInfoA
AppendMenuW
DrawTextW
IsDlgButtonChecked
PeekMessageW
SetWindowTextW
DefWindowProcW
SetScrollPos
MessageBeep
DrawEdge
RedrawWindow
GetWindowLongA
FindWindowW
GetMessageA
DrawIconEx
EndDialog
GetMenu
CopyRect
RegisterShellHookWindow
IsWindowVisible
LoadMenuA
gdi32
CreateSolidBrush
MoveToEx
CreatePalette
Rectangle
SetBkColor
CreateFontIndirectW
LineTo
ExtTextOutW
PatBlt
TranslateCharsetInfo
GetTextExtentPointW
StretchBlt
CreateCompatibleDC
DeleteObject
GetTextExtentPoint32W
GetTextMetricsW
tapi32
lineDrop
lineSetAgentStateEx
lineCreateAgentSessionW
phoneGetButtonInfo
lineGetAddressCaps
phoneGetMessage
lineConfigDialogEdit
lineGetDevConfigW
comdlg32
GetOpenFileNameW
shell32
SHGetFolderPathW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
SHGetSpecialFolderLocation
ShellAboutW
winmm
mixerGetLineInfoA
auxOutMessage
mmioDescend
mmGetCurrentTask
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nes1 Size: 512B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nes2 Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nes3 Size: 512B - Virtual size: 401B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nes4 Size: 512B - Virtual size: 306B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 58B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ