Static task
static1
Behavioral task
behavioral1
Sample
cfcd1be57c54494408f929fc1e0c2d28_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfcd1be57c54494408f929fc1e0c2d28_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cfcd1be57c54494408f929fc1e0c2d28_JaffaCakes118
-
Size
112KB
-
MD5
cfcd1be57c54494408f929fc1e0c2d28
-
SHA1
9c09680057758bddaaf84355eacfd997e3008fb3
-
SHA256
0511ac9b302b5a99e48e6aecb27c077810e435c7c7404c38e60f4dcd28697684
-
SHA512
e0be6776bc626f9f296d62db5dc6e8461cddb7ff04c515edb19dcbdcd7963e104c67bddd59d3199c4ab8b1a0dbd36e07139ec228e742f7e5e6ef283e62a3f2b7
-
SSDEEP
3072:EBpZHWfx3ykUr0iKrl7KnBHwdnMRwaDdSO:Ew3yJAiKsBQVonN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfcd1be57c54494408f929fc1e0c2d28_JaffaCakes118
Files
-
cfcd1be57c54494408f929fc1e0c2d28_JaffaCakes118.dll windows:4 windows x86 arch:x86
c74dcd9ac418553c11f69372d080d092
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetOverlappedResult
WaitForMultipleObjects
GetQueuedCompletionStatus
GetTickCount
MultiByteToWideChar
lstrlenA
WriteConsoleA
GetSystemTimeAsFileTime
ReadFile
GlobalFree
SizeofResource
FindResourceW
lstrcmpW
GlobalAlloc
LoadResource
lstrcmpiW
GetCurrentThreadId
lstrlenW
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetCurrentProcessId
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
ResetEvent
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
GetSystemInfo
GetFileType
SetHandleCount
TerminateProcess
ExitProcess
VirtualQuery
GetVersionExA
RtlUnwind
GetCurrentProcess
SetProcessWorkingSetSize
SetEvent
PostQueuedCompletionStatus
CloseHandle
WriteFile
InterlockedIncrement
InterlockedDecrement
GetProcessHeap
InterlockedExchange
GetStdHandle
VirtualProtect
HeapSize
GetCommandLineA
user32
GetWindowDC
GetWindowRect
GetPropW
SetPropW
SetWindowLongW
SetWindowLongA
GetClassNameW
IsWindowUnicode
SendMessageW
GetWindowLongW
CallNextHookEx
SetWindowsHookExW
RemovePropW
CallWindowProcW
GetClientRect
MapWindowPoints
ShowCaret
BeginPaint
EndPaint
ExcludeUpdateRgn
GetWindowTextW
CharNextW
DrawTextW
GetFocus
IntersectRect
DrawFocusRect
ValidateRect
ScreenToClient
InvalidateRect
GetSysColor
GetDC
GetSystemMetrics
DefWindowProcW
IsIconic
IsWindowEnabled
GetWindow
GetParent
InflateRect
OffsetRect
ReleaseDC
wvsprintfA
MsgWaitForMultipleObjects
HideCaret
advapi32
ReportEventW
gdi32
CreateDIBitmap
SetBkColor
DeleteObject
IntersectClipRect
GetTextExtentPointW
ExtTextOutW
SelectObject
SetTextColor
CreateSolidBrush
SetBkMode
PatBlt
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ