Static task
static1
Behavioral task
behavioral1
Sample
cde5a8cb4b16ebb5c741b5a9cd10592c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cde5a8cb4b16ebb5c741b5a9cd10592c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cde5a8cb4b16ebb5c741b5a9cd10592c_JaffaCakes118
-
Size
212KB
-
MD5
cde5a8cb4b16ebb5c741b5a9cd10592c
-
SHA1
21e427882060cb223cdb1be74f66c55dbd7242fc
-
SHA256
159e3f755a76e89d16922ae059ce0307c500ca3fc671c79b2195113d6cb5cc56
-
SHA512
325a96969cc34ee41e2b815d48ae0ee59e942ccb7d1e927b30ca0510b63834625ed6251e46cf47246f7349f4c9f3f02f5a01fba28485c402d0618d4ce65d9af2
-
SSDEEP
6144:uavqQTMNrxYMRcm2cmlbyFWwv5VTinnoCr/:toEbYl5Vuno
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cde5a8cb4b16ebb5c741b5a9cd10592c_JaffaCakes118
Files
-
cde5a8cb4b16ebb5c741b5a9cd10592c_JaffaCakes118.dll windows:4 windows x86 arch:x86
4dcb02375fc6befd1cfd2ac6dbe57240
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
TerminateProcess
SetUnhandledExceptionFilter
CreateFileW
DefineDosDeviceW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
OpenProcess
GetSystemDirectoryA
InterlockedIncrement
SetEvent
WideCharToMultiByte
FreeLibrary
CompareStringA
GetComputerNameW
TlsGetValue
GetVersionExA
Sleep
HeapDestroy
GetProcessHeap
TlsSetValue
CompareStringW
WaitForSingleObjectEx
ResetEvent
InterlockedDecrement
CreateEventA
HeapCreate
TlsAlloc
MultiByteToWideChar
GetCurrentThread
LoadLibraryA
GetModuleHandleW
GetCommandLineW
GetStartupInfoW
GetSystemPowerStatus
GetVersionExW
ExitProcess
InterlockedExchange
CreateMutexW
WaitForSingleObject
CreateEventW
ReleaseMutex
lstrcmpiW
GetModuleHandleA
LoadLibraryW
GetProcAddress
GetFileAttributesW
GetVersion
CloseHandle
LocalFree
LocalAlloc
GetCurrentProcess
GetModuleFileNameW
OutputDebugStringA
lstrcmpW
WriteProfileStringW
lstrlenW
GetProfileStringW
QueryDosDeviceW
UnhandledExceptionFilter
GetCommandLineA
TlsFree
VirtualProtect
user32
BeginPaint
SetWindowPos
PostMessageW
EndPaint
SetTimer
CreateWindowExW
RegisterClassW
DestroyWindow
LoadImageW
FillRect
SetRect
DefWindowProcW
ValidateRect
SystemParametersInfoW
SetCursor
GetCursorPos
IsWindow
PeekMessageW
GetForegroundWindow
DispatchMessageW
TranslateMessage
GetMessageW
CheckRadioButton
LoadIconW
RegisterWindowMessageW
SetForegroundWindow
FindWindowW
ReleaseDC
GetDC
GetSystemMetrics
GetClientRect
SetWindowTextW
LoadStringW
SendMessageW
GetDlgItem
GetParent
EndDialog
EnableWindow
SetWindowLongW
DialogBoxParamW
SetDlgItemTextW
CheckDlgButton
ShowWindow
MessageBoxW
CharNextW
CharPrevW
advapi32
GetTokenInformation
FreeSid
OpenProcessToken
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegEnumValueW
RegOpenKeyExW
EqualSid
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
ChangeServiceConfigW
AllocateAndInitializeSid
gdi32
GetObjectW
CreateCompatibleDC
DeleteDC
GetStockObject
GetClipBox
SelectObject
BitBlt
ole32
CoCreateInstance
msvcrt
_amsg_exit
free
_XcptFilter
wcscspn
wcsspn
memcpy
_wcsupr
wcsstr
_vsnwprintf
wcschr
memset
_initterm
_adjust_fdiv
_itow
rand
srand
time
_cexit
_controlfp
malloc
_except_handler3
Sections
.text Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ