Static task
static1
Behavioral task
behavioral1
Sample
efd3ca0ed7d4e7207eacff6b7bc77f6c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efd3ca0ed7d4e7207eacff6b7bc77f6c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
efd3ca0ed7d4e7207eacff6b7bc77f6c_JaffaCakes118
-
Size
84KB
-
MD5
efd3ca0ed7d4e7207eacff6b7bc77f6c
-
SHA1
ca9a2a3e9bb8c391645a58ff030f5fabadee1d63
-
SHA256
e1f766061012fb9841033abc4cdd0bf3676bc1b1c3e3ca42f9386d3efe7ac5ff
-
SHA512
a390af2a864cadf23f8d6e34c7911b979bcb0757a31f1b4ff9f1b2271383dd7353c024735c593d7d40cb374947ebc9e8e9411e14fd98120d4f879eb95c48ea52
-
SSDEEP
1536:iGJzkCMXsvWbFlwdGXFyBv2/q/8FKF9vFL+EIKBz:tzkCM4WfPXFuvb/8FULNz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efd3ca0ed7d4e7207eacff6b7bc77f6c_JaffaCakes118
Files
-
efd3ca0ed7d4e7207eacff6b7bc77f6c_JaffaCakes118.dll windows:4 windows x86 arch:x86
5253158798b4ee7870582ab3fa0fda18
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LocalReAlloc
MulDiv
IsDBCSLeadByteEx
WideCharToMultiByte
LeaveCriticalSection
GetVersionExA
DisableThreadLibraryCalls
lstrlenW
SetLastError
LocalFree
MultiByteToWideChar
LocalAlloc
FreeResource
GetLastError
TerminateProcess
GetProcessHeap
HeapAlloc
HeapFree
CreateFileMappingW
MapViewOfFileEx
GetFileSize
UnmapViewOfFile
CreateFileW
GetCurrentProcess
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
VirtualProtect
VirtualFree
VirtualAlloc
user32
wsprintfA
LoadStringA
CharNextA
advapi32
CryptGetUserKey
CryptDestroyKey
CryptGenKey
CryptImportKey
CryptAcquireContextA
CryptGetProvParam
OpenProcessToken
RegQueryValueExW
RegCloseKey
RegEnumValueW
RegOpenKeyExW
GetSidSubAuthority
GetSidSubAuthorityCount
IsValidSid
GetTokenInformation
CryptReleaseContext
gdi32
Polyline
Polygon
LineTo
CreateFontIndirectW
GetCurrentPositionEx
MoveToEx
GetStockObject
GetObjectA
GetPaletteEntries
DeleteEnhMetaFile
PlgBlt
DPtoLP
CreateBitmap
PatBlt
CreateDIBitmap
ExcludeClipRect
PolyPolygon
GetPath
GetWinMetaFileBits
CloseEnhMetaFile
PlayEnhMetaFile
CreateEnhMetaFileA
CombineTransform
GetDeviceCaps
SetEnhMetaFileBits
CreateBrushIndirect
CreateDIBPatternBrushPt
CreatePen
ExtSelectClipRgn
CreateRectRgn
FlattenPath
FillPath
StrokeAndFillPath
SelectPalette
PolyBezier
ModifyWorldTransform
ExtTextOutA
ExtTextOutW
GetTextAlign
GetTextCharsetInfo
TranslateCharsetInfo
GetRandomRgn
IntersectClipRect
RestoreDC
EndPath
Arc
Chord
Pie
PolyDraw
RoundRect
SelectObject
PolyBezierTo
AngleArc
Ellipse
Rectangle
BeginPath
SaveDC
DeleteDC
SetWorldTransform
SetGraphicsMode
CreateCompatibleDC
GetDIBits
DeleteObject
StretchBlt
OffsetViewportOrgEx
StrokePath
ole32
CoCreateGuid
msvcr71
_wcsicmp
__dllonexit
__CppXcptFilter
_adjust_fdiv
_initterm
_except_handler3
malloc
free
memset
_onexit
_CxxThrowException
strncmp
memcpy
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ