Static task
static1
Behavioral task
behavioral1
Sample
e9e1d68e051d6b5ad771c7b1210703ab_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e9e1d68e051d6b5ad771c7b1210703ab_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e9e1d68e051d6b5ad771c7b1210703ab_JaffaCakes118
-
Size
132KB
-
MD5
e9e1d68e051d6b5ad771c7b1210703ab
-
SHA1
00ee6a08ebd89661cfc0503a02b6bcd6bd28040e
-
SHA256
b3b9ab35bdbbc42d84c591da1bb9ffbcff12e3d5a4413765df17ce6f483ed96d
-
SHA512
e8c55b7e41b5eb62e7ed136c93a5515bdac035ec33c82386ee70801a3f72182b5528f09f98310dc2eef0bea8e4d8cc59a9b5a608f9e8e8779969a869d2f93979
-
SSDEEP
3072:gTfP9SDm/aoo2TXeQrz0Ct7UD5hQyr25IQPeTypm+:gr10m/VX/vR72WwQPeTQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9e1d68e051d6b5ad771c7b1210703ab_JaffaCakes118
Files
-
e9e1d68e051d6b5ad771c7b1210703ab_JaffaCakes118.dll windows:4 windows x86 arch:x86
611ccbcc5243159550f88f1dedf205b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
EndDialog
DrawIcon
IsMenu
AppendMenuA
GetDC
DrawTextA
AppendMenuW
InsertMenuA
AlignRects
DialogBoxParamA
BlockInput
CopyRect
GetWindowTextLengthA
CloseWindow
LoadCursorA
GetDlgItem
CopyRect
DrawTextA
GetWindowTextLengthA
CalcMenuBar
CreateIcon
IsWindow
CopyIcon
DrawIcon
AlignRects
DialogBoxParamW
GetFocus
GetCursor
GetDC
AppendMenuA
DialogBoxParamA
LoadMenuA
CalcMenuBar
CopyRect
DrawTextW
AlignRects
GetDC
GetWindowTextA
CloseWindow
LoadMenuA
AppendMenuA
GetWindowTextLengthA
CopyImage
IsMenu
DialogBoxParamA
GetFocus
CopyIcon
kernel32
CopyFileA
GetLastError
CreateDirectoryA
ReadFile
DeleteFileW
OpenFileMappingA
GetFileSize
CopyFileExW
Sleep
OpenFile
CopyFileW
CreateThread
DeleteAtom
GetStdHandle
FindFirstFileA
gdi32
AddFontResourceExA
GetDCOrgEx
SetTextColor
ClearBitmapAttributes
BitBlt
CreateSolidBrush
ExtTextOutA
GetClipBox
AddFontResourceExW
AddFontResourceW
AddFontMemResourceEx
CancelDC
ClearBrushAttributes
GetBrushOrgEx
CloseFigure
CloseMetaFile
CopyMetaFileA
BeginPath
GetClipBox
AddFontResourceTracking
GetPixel
advapi32
RegOpenKeyW
RegQueryValueExA
RegQueryValueA
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegOpenKeyExW
RegReplaceKeyW
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegQueryValueExW
RegEnumKeyW
RegDeleteValueW
RegLoadKeyW
RegOpenKeyExA
RegReplaceKeyW
RegQueryValueExA
RegDeleteValueA
RegReplaceKeyA
RegEnumKeyExW
RegQueryInfoKeyA
RegCreateKeyExW
RegCreateKeyExA
RegFlushKey
RegLoadKeyW
RegGetKeySecurity
RegEnumKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueA
RegCreateKeyW
RegReplaceKeyA
RegLoadKeyA
RegQueryValueW
RegEnumKeyExA
RegDeleteKeyW
RegFlushKey
RegLoadKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteKeyA
RegReplaceKeyW
RegOpenKeyW
RegOpenKeyA
RegQueryValueExA
comctl32
ImageList_GetIconSize
ImageList_Create
ImageList_Draw
ImageList_DragEnter
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_Replace
ImageList_DragShowNolock
ImageList_DragLeave
ImageList_LoadImageW
ImageList_Read
ImageList_Merge
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_DragMove
ImageList_LoadImageA
ImageList_DragLeave
ImageList_DragEnter
ImageList_Create
ImageList_GetIconSize
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_Replace
ImageList_LoadImage
ImageList_DrawEx
ImageList_Merge
ImageList_DragShowNolock
ImageList_Remove
ImageList_Read
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 78B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 159B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ