d3dUserlog
Static task
static1
Behavioral task
behavioral1
Sample
d59b2d32b51f33c93de768620766b031_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d59b2d32b51f33c93de768620766b031_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d59b2d32b51f33c93de768620766b031_JaffaCakes118
-
Size
128KB
-
MD5
d59b2d32b51f33c93de768620766b031
-
SHA1
b77f1b85604bbf2eaae25bb6bff3b48144634b56
-
SHA256
684649eb7b9d60837f793155b7d5fee6a5dc487c33118cabb194557abef3db81
-
SHA512
49931b7c8565e1c284d7a49bc60e4062bf85e4325c99253a63e8ec3ed4810d899e158df7c5660caf05de37b9fd4e42d266ce5295e9adabba433b8dc120c26bef
-
SSDEEP
3072:e5TiEMch9EmlOjBPibkOOgCLw+JQeCXGDE5Ilro2:+ifKg/geCXh5Cr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d59b2d32b51f33c93de768620766b031_JaffaCakes118
Files
-
d59b2d32b51f33c93de768620766b031_JaffaCakes118.dll windows:4 windows x86 arch:x86
73d855db621fda90a3dbe4c1f24af18a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetModuleHandleA
lstrlenA
GetLastError
UnmapViewOfFile
LocalFree
LeaveCriticalSection
CreateDirectoryA
CreateEventA
OpenEventA
WaitForSingleObject
CreateProcessA
Sleep
InterlockedIncrement
MapViewOfFile
SetLastError
InterlockedCompareExchange
ExitProcess
GetProcAddress
EnterCriticalSection
lstrlenW
InterlockedDecrement
GetCommandLineA
GetModuleFileNameA
ReleaseMutex
CopyFileA
CloseHandle
GetTickCount
ole32
CoUninitialize
CoCreateGuid
OleSetContainedObject
CoInitialize
OleCreate
CreateBindCtx
user32
PostQuitMessage
PostMessageA
GetParent
CreateWindowExA
GetClassNameA
SetWindowLongA
KillTimer
DispatchMessageA
SetTimer
GetMessageA
DefWindowProcA
GetWindowLongA
FindWindowA
RegisterWindowMessageA
GetSystemMetrics
DestroyWindow
SendMessageA
TranslateMessage
oleaut32
SysAllocString
SysAllocStringLen
SysFreeString
shlwapi
StrStrIW
UrlUnescapeW
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
Exports
Exports
Sections
.text Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ