kqxw
Static task
static1
Behavioral task
behavioral1
Sample
cdd70f74fc3f1d0aa3d2a60719b0fe99_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cdd70f74fc3f1d0aa3d2a60719b0fe99_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cdd70f74fc3f1d0aa3d2a60719b0fe99_JaffaCakes118
-
Size
50KB
-
MD5
cdd70f74fc3f1d0aa3d2a60719b0fe99
-
SHA1
246a163e760496b8946232a9bbc85442c6a5f23e
-
SHA256
bce12f95b9490aabe7cd755cefd355a55383b4ba54cf9a7b3cc071096dd871a3
-
SHA512
6c63c149f8e9e75b3aeca2456da3096ac404ebdbf927aa9c61e72b9b0e1d5ff5002c7441148d9cfe3a0501f992fb0ada3f8099eb04cc1f63afc7e811b475ba09
-
SSDEEP
768:G5l6k7Mo1YjNbGuaYWVGFcLBvut4/oSqKhXzokkvspBxxUJLg1:G5l6k7M4+/smu/sKZzodgBxSg1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdd70f74fc3f1d0aa3d2a60719b0fe99_JaffaCakes118
Files
-
cdd70f74fc3f1d0aa3d2a60719b0fe99_JaffaCakes118.dll windows:4 windows x86 arch:x86
056473e53490259fa3771329b8466653
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlCanonicalizeA
kernel32
Beep
SetLastError
SetInformationJobObject
lstrcmpiA
FindNextChangeNotification
QueueUserAPC
GetLargestConsoleWindowSize
lstrcpynW
FindNextVolumeA
EnumSystemLocalesA
GetFileType
FreeResource
ReadProcessMemory
GetProcessPriorityBoost
GetCurrentProcess
SetEndOfFile
CreateHardLinkA
FreeLibraryAndExitThread
BuildCommDCBAndTimeoutsW
CreateMutexA
GetDiskFreeSpaceExA
DefineDosDeviceA
GetSystemDefaultLCID
MulDiv
GetStartupInfoW
SetComputerNameW
SetLocalTime
SetConsoleCursorInfo
GetFileAttributesExW
GetFileAttributesW
FindResourceW
ExitThread
GetTimeZoneInformation
RequestWakeupLatency
GetCommConfig
FileTimeToLocalFileTime
GetLogicalDrives
GlobalAddAtomA
FindResourceExA
Sleep
GetPrivateProfileStringW
HeapAlloc
GetProcessHeap
HeapFree
ConvertDefaultLocale
InterlockedDecrement
ole32
OleRun
user32
IsClipboardFormatAvailable
DialogBoxIndirectParamW
OpenIcon
GetMenuItemRect
CallWindowProcA
InvalidateRgn
GetPropA
KillTimer
SetTimer
GetWindowThreadProcessId
CharLowerBuffA
CreateIconIndirect
UnhookWinEvent
SetCursorPos
VkKeyScanExA
GetDlgItemTextW
HideCaret
DragObject
OemToCharBuffA
ToAscii
GetCursorInfo
DlgDirSelectComboBoxExA
EmptyClipboard
GetClassInfoExW
LoadImageW
ChangeDisplaySettingsA
FindWindowA
SetCapture
GetSysColor
CountClipboardFormats
SetPropA
CheckMenuRadioItem
GetListBoxInfo
GetKeyNameTextW
SendMessageTimeoutW
BeginDeferWindowPos
ReleaseDC
advapi32
RegLoadKeyA
msvcrt
malloc
memset
free
winmm
mixerOpen
Exports
Exports
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 1B
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 1B
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 798B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ