aphwz
Static task
static1
Behavioral task
behavioral1
Sample
d608b8f39fdfa2b0a73ffd72f09e49e2_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
d608b8f39fdfa2b0a73ffd72f09e49e2_JaffaCakes118
-
Size
136KB
-
MD5
d608b8f39fdfa2b0a73ffd72f09e49e2
-
SHA1
994462c04cde95d39fb06ccc48a49c74e5472a62
-
SHA256
177e6ec869e4bd377a77c4598ec103a103e9f21760f1b763feb40e7a6cf03602
-
SHA512
7bccafaacfeaae37a1f2dece15743d1d55f9a9eddf89e404a12bb040f7ee1757d8db515ef91d92651e969b4767dd561081371338e216b294c80cda77042ff04e
-
SSDEEP
3072:nQgoQuUsvG30Wf8LAaQk0TFZXM7fYu4TsfqwlPllfyZ:pnAi0n8k0TFO7gElLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d608b8f39fdfa2b0a73ffd72f09e49e2_JaffaCakes118
Files
-
d608b8f39fdfa2b0a73ffd72f09e49e2_JaffaCakes118.dll windows:4 windows x86 arch:x86
b7566c7b38f73d8152874d972a607072
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
SystemFunction023
CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptSignHashA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegLoadKeyW
kernel32
VirtualAlloc
LoadResource
FindResourceA
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
InterlockedIncrement
LeaveCriticalSection
QueryPerformanceCounter
ReadConsoleW
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
lstrcmpW
lstrlenW
GetCommandLineW
CloseHandle
CreateMutexA
DeleteCriticalSection
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetStartupInfoA
GetStdHandle
GetVersion
HeapAlloc
HeapCreate
HeapDestroy
InitializeCriticalSection
InterlockedDecrement
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReleaseMutex
SetConsoleCtrlHandler
SetHandleCount
SetLastError
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualFree
WaitForSingleObject
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcpyA
GlobalLock
GlobalUnlock
InterlockedCompareExchange
InterlockedExchange
Sleep
CompareStringW
CompareStringA
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
HeapSize
LoadLibraryA
VirtualQuery
RtlUnwind
IsBadWritePtr
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
FatalAppExitA
WriteFile
FreeEnvironmentStringsA
HeapFree
GetCurrentThread
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
SetEnvironmentVariableA
ole32
ReleaseStgMedium
WriteClassStg
IIDFromString
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoCreateInstance
oleaut32
VarR4FromI2
VarBstrFromDec
rpcrt4
I_RpcTransDatagramAllocate2
NDRCContextBinding
user32
GetWindowLongW
GetDlgItemTextW
GetDlgItem
EndDialog
EnableWindow
IsWindowVisible
DrawStateW
IsDlgButtonChecked
RealGetWindowClassA
RegisterClipboardFormatW
SendMessageW
SetWindowLongW
WinHelpW
Exports
Exports
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ