Static task
static1
Behavioral task
behavioral1
Sample
d0126c5f025fbae0fdb69ce8e8dd07ad_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d0126c5f025fbae0fdb69ce8e8dd07ad_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d0126c5f025fbae0fdb69ce8e8dd07ad_JaffaCakes118
-
Size
120KB
-
MD5
d0126c5f025fbae0fdb69ce8e8dd07ad
-
SHA1
7afbb3edc0327e25ce27ab20a060c460bb74c004
-
SHA256
df2116b710699283a82e38859df5fc319fc6a0b27ac2dd6ea6f84123692a991d
-
SHA512
c410f1a76ddc993060dee3874ddbef1ac0073e5c7cb5cd82632adb625cc87eb36f5685b01e4af4b093e31dc340f510324d5470c0317c71fb73cc8e66254132fd
-
SSDEEP
3072:1eZy9wIhzJZTumDKaqx9k0g0JKlRXXxVfastpx:1sy9wIdJRu2KaqtgBXvfa8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0126c5f025fbae0fdb69ce8e8dd07ad_JaffaCakes118
Files
-
d0126c5f025fbae0fdb69ce8e8dd07ad_JaffaCakes118.dll windows:4 windows x86 arch:x86
13c13d20fc242620952cd84ac5d61533
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
winmm
timeBeginPeriod
timeEndPeriod
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInGetDevCapsA
waveInGetDevCapsW
mciSendCommandA
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetNumDevs
waveOutGetPosition
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
ole32
PropVariantClear
IsEqualGUID
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoCreateInstance
CoInitialize
dinput
DirectInputCreateW
ws2_32
accept
socket
send
select
recv
listen
ioctlsocket
htons
WSAAsyncGetHostByName
WSACancelAsyncRequest
WSACleanup
WSAGetLastError
WSAStartup
inet_addr
bind
closesocket
connect
htonl
advapi32
SetFileSecurityW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
OpenProcessToken
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
GetSecurityDescriptorDacl
GetLengthSid
GetAclInformation
GetAce
EqualSid
AllocateAndInitializeSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
user32
OpenClipboard
CharLowerBuffA
CharToOemA
ClientToScreen
wsprintfA
UpdateWindow
TranslateMessage
ShowWindow
ShowCursor
SetWindowPos
SetRect
SetClipboardData
ScreenToClient
ReleaseDC
RegisterWindowMessageA
RegisterClassA
PostThreadMessageA
PeekMessageA
AdjustWindowRect
MsgWaitForMultipleObjects
MessageBoxW
LoadIconA
LoadCursorA
GetSystemMetrics
GetQueueStatus
GetForegroundWindow
GetDC
GetClipboardData
EmptyClipboard
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
CloseClipboard
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
kernel32
SetWaitableTimer
SetUnhandledExceptionFilter
SetThreadPriority
SetThreadIdealProcessor
SetThreadAffinityMask
Sleep
SetLastError
SetHandleCount
SetFileTime
SetFilePointer
SetEvent
SetEnvironmentVariableA
SetStdHandle
TerminateProcess
SetEndOfFile
TlsAlloc
RtlUnwind
ResumeThread
RemoveDirectoryW
ReleaseSemaphore
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
OutputDebugStringA
OpenFile
OpenEventA
MultiByteToWideChar
MulDiv
MoveFileA
LoadLibraryA
LeaveCriticalSection
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrlenA
GetFullPathNameA
GetLastError
GetLocaleInfoA
SetCurrentDirectoryA
EnterCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsDebuggerPresent
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
HeapFree
HeapCreate
HeapAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetUserDefaultLangID
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatA
GetTickCount
GetThreadPriority
GetTempPathW
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryA
GetSystemDefaultLangID
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetProcessHeap
GetOverlappedResult
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
AreFileApisANSI
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateMutexA
CreatePipe
CreateProcessA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
DeleteFileA
DeviceIoControl
DuplicateHandle
GetFileType
EnumSystemLocalesA
ExitProcess
ExitThread
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetLocaleInfoW
shell32
SHGetSpecialFolderPathW
ShellExecuteA
SHFileOperationW
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ