__SetMenuContextHelpId@12
Static task
static1
Behavioral task
behavioral1
Sample
d71e0ee3c40ea137f93d9638c0c69afc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d71e0ee3c40ea137f93d9638c0c69afc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d71e0ee3c40ea137f93d9638c0c69afc_JaffaCakes118
-
Size
147KB
-
MD5
d71e0ee3c40ea137f93d9638c0c69afc
-
SHA1
ff7042fd0e09adcdefd6442fe53d80e13036690c
-
SHA256
91a34f6929c61bfe440e4abe8b7e819e901cd3d2db4fef11f41bcd9a7cafd087
-
SHA512
978cfbb7299a762aaee0ea1d7ca7abe8fe1de61011e62fe1d0a903b00d8f77de47065d65bebc13857471cb6431ab941e58b7325deaa1989bf53b710396cf3d01
-
SSDEEP
3072:ZK3Fk9ym4bAchjN/VmJ3/NsrDuV54a3v/tKLzAvgDkg4:IFulZcPbDcZVwzANh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d71e0ee3c40ea137f93d9638c0c69afc_JaffaCakes118
Files
-
d71e0ee3c40ea137f93d9638c0c69afc_JaffaCakes118.dll windows:5 windows x86 arch:x86
9718d9e9ad8e27947d39482aaa3355c2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathCommonPrefixW
StrFromTimeIntervalW
StrCmpW
PathCombineW
StrToIntExW
StrStrIW
shell32
ord147
kernel32
OpenEventA
FileTimeToDosDateTime
GetCommState
GetVersionExW
EnumResourceLanguagesA
lstrcmpW
GetFileAttributesA
FindClose
GetFileType
LockResource
SetCommMask
CreateWaitableTimerW
LoadLibraryExW
ClearCommError
lstrcpyW
OpenSemaphoreW
GetNamedPipeInfo
CreateEventA
LoadLibraryW
GetHandleInformation
user32
EnumDisplaySettingsExW
GetLastActivePopup
SetActiveWindow
ScreenToClient
GetSystemMenu
GetNextDlgGroupItem
GetDlgItemInt
SendNotifyMessageW
UnloadKeyboardLayout
GetScrollRange
GetDC
DrawFocusRect
ScrollDC
GetKeyboardLayout
LoadMenuW
DestroyCursor
EnumPropsExW
SetMenu
DrawMenuBar
SetCaretBlinkTime
AdjustWindowRect
MessageBoxExW
DefWindowProcW
DefFrameProcW
GetWindow
SendMessageTimeoutW
gdi32
LPtoDP
GetEnhMetaFileDescriptionW
GetRandomRgn
CloseMetaFile
GetTextFaceW
SaveDC
GetCharABCWidthsW
GetTextExtentExPointW
CreateCompatibleDC
GetMetaFileBitsEx
FillPath
SetStretchBltMode
UpdateColors
advapi32
SetAclInformation
AddAuditAccessAceEx
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ex_dat Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i_text Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mem_0 Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mconst Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat_s Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 890B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ