Static task
static1
Behavioral task
behavioral1
Sample
ce28932726575e34a94b728e5713164d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce28932726575e34a94b728e5713164d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ce28932726575e34a94b728e5713164d_JaffaCakes118
-
Size
120KB
-
MD5
ce28932726575e34a94b728e5713164d
-
SHA1
3001303ab2444527c8416e593691f6eccd48487f
-
SHA256
40597f15b206c7901832b6810f8e16fb5b8cebbd8ec3311e08b60e46eeefeb6b
-
SHA512
c85fdce9315335b5caf56c5a4d2dd99db4888d624fb270d519aec7e9e418d13d39a4374a12df0d812ae6868a70305c74c05d1ed1ed197223a428cf554dadd1bc
-
SSDEEP
1536:hOoxigVxMlURnFw/tT7dHivte+0lvUzIIl9umIw3AlmYXFolQXVCdnUIobl5eok1:hT+6Fy4vkU8I2mIw3UVeQgVNo8yIcQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce28932726575e34a94b728e5713164d_JaffaCakes118
Files
-
ce28932726575e34a94b728e5713164d_JaffaCakes118.dll windows:4 windows x86 arch:x86
0659111ff26f1d8b2b20a9f8a4d5c427
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LocalFree
GetStringTypeA
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
HeapAlloc
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
DisableThreadLibraryCalls
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
RtlUnwind
InterlockedIncrement
InterlockedDecrement
FindClose
FindFirstFileW
lstrlenW
GetModuleFileNameW
LocalAlloc
LCMapStringW
LoadLibraryA
GlobalAlloc
MulDiv
CloseHandle
SetEvent
CreateEventW
CreateThread
GetModuleHandleW
GetProcAddress
GetCommandLineA
FreeEnvironmentStringsA
VirtualProtect
GetStringTypeW
user32
IsWindow
wsprintfW
BeginPaint
GetParent
GetSysColor
SendDlgItemMessageW
SetFocus
EnableWindow
SetWindowLongW
SetCursor
UpdateWindow
MapWindowPoints
TranslateMessage
TrackPopupMenu
CreateDialogParamW
CreateMenu
GetSubMenu
DestroyWindow
GetDlgItemTextW
GetWindowTextW
GetClientRect
GetSystemMetrics
EndPaint
InvalidateRect
DefWindowProcW
WinHelpW
SendMessageW
LoadStringW
RegisterClipboardFormatW
PostMessageW
LoadCursorW
SetWindowPos
GetWindowLongW
SetWindowTextW
DestroyMenu
GetMenuItemCount
SetMenuItemInfoW
InsertMenuW
CreatePopupMenu
CheckMenuRadioItem
EnableMenuItem
CheckMenuItem
SystemParametersInfoW
GetDialogBaseUnits
GetWindowTextLengthW
OffsetRect
GetSysColorBrush
InflateRect
DrawFocusRect
DrawStateW
GetMenuStringW
PeekMessageW
GetMessageW
GetActiveWindow
PostThreadMessageW
InsertMenuItemW
IsWindowEnabled
GetWindow
MessageBoxW
KillTimer
SetTimer
MsgWaitForMultipleObjects
SetDlgItemTextW
IsDialogMessageW
GetDlgItem
DispatchMessageW
SetActiveWindow
FillRect
DrawEdge
ScreenToClient
ChildWindowFromPoint
GetDlgCtrlID
GetMenuItemInfoW
SetForegroundWindow
DestroyIcon
SetMenu
IsChild
GetWindowRect
DrawMenuBar
GetAsyncKeyState
GetFocus
ShowWindow
GetMenu
IsWindowVisible
advapi32
RegQueryValueExA
RegEnumKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
RegCreateKeyW
RegOpenKeyExW
gdi32
PatBlt
CreateCompatibleDC
GetTextExtentPointW
DeleteDC
DeleteObject
SelectObject
SetTextColor
SetBkColor
GetTextExtentPoint32W
ExtTextOutW
CreateFontIndirectW
ole32
CoMarshalInterThreadInterfaceInStream
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
CoInitialize
CoCreateInstance
CoUninitialize
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ