EnumTvValueNext
Static task
static1
Behavioral task
behavioral1
Sample
fd74e19d93333e03281835638365372d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd74e19d93333e03281835638365372d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fd74e19d93333e03281835638365372d_JaffaCakes118
-
Size
361KB
-
MD5
fd74e19d93333e03281835638365372d
-
SHA1
0fe9e2fc57fbc0c5b717edd232a2670bfd9e7bd2
-
SHA256
e4948d26d503c6bbf77b3bcd9400d60dbc895e9dd838eea699305fda17221ba8
-
SHA512
bb1b07396d913f5eb24241168ec3fd36eb314e4f943eba1d4979a41d787774205649ebccafa4a78ce3948e00268df40bec29149a4d11ada57bea5995cc8b18cd
-
SSDEEP
6144:7BA87vpcrZcbVF0vbDaVrWpzxPW/IVWjd5BELE2bbHmM9PNFnIB5/:7y87bFo+AshyE23HvNJK5/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd74e19d93333e03281835638365372d_JaffaCakes118
Files
-
fd74e19d93333e03281835638365372d_JaffaCakes118.dll windows:4 windows x86 arch:x86
793b1298e6e33746a8a00eee52dfc875
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedDecrement
InterlockedIncrement
GetProcAddress
FreeLibrary
LoadLibraryA
CloseHandle
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
lstrlenW
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
SetConsoleCtrlHandler
WriteFile
GetStdHandle
GetModuleFileNameA
HeapAlloc
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FatalAppExitA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
IsValidLocale
IsValidCodePage
user32
ReleaseDC
GetDC
IntersectRect
IsRectEmpty
gdi32
SetROP2
GetStockObject
Rectangle
MoveToEx
LineTo
SetTextAlign
SetTextColor
TextOutA
SelectClipRgn
CreateCompatibleDC
RestoreDC
StretchDIBits
SetStretchBltMode
DPtoLP
SetWindowOrgEx
SetViewportOrgEx
SetMapMode
SaveDC
LPtoDP
GetMapMode
GetClipBox
GetWindowExtEx
GetViewportExtEx
GetTextExtentPoint32A
DeleteObject
SelectObject
CreateFontIndirectA
SetBkMode
SetMetaRgn
IntersectClipRect
SetViewportExtEx
SetWindowExtEx
ExtTextOutA
SetBkColor
DeleteDC
CreateDIBSection
advapi32
RegOpenKeyA
RegQueryValueA
RegCloseKey
ole32
CoInitialize
CoUninitialize
oleaut32
SysFreeString
VariantInit
VariantClear
CreateErrorInfo
VariantChangeType
SetErrorInfo
GetErrorInfo
SysAllocString
Exports
Exports
Sections
.text Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ