Static task
static1
Behavioral task
behavioral1
Sample
022b77d323c6eedc22e4d2b69a4da6e0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
022b77d323c6eedc22e4d2b69a4da6e0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
022b77d323c6eedc22e4d2b69a4da6e0_JaffaCakes118
-
Size
224KB
-
MD5
022b77d323c6eedc22e4d2b69a4da6e0
-
SHA1
e41ed9ca7088bfeceb36f3faa8920b0946eb27f2
-
SHA256
00d4c2f522c024c8f85475dc3b4d026b5028ce6dd222dbdf5872dccb6cd23709
-
SHA512
29aaae28dc7517b6a8c2d325eca8a0719b2ac5d96cb9fe30b4d143bb4e8e79472124a4f46c24f3b8f4b3ed58075a7aadafa115fb5890f880289c3d248cadc829
-
SSDEEP
3072:6Pp4MT8lnNVOatC6mzXLgBSrKVGrGWpdSc0c1xnvsMmokTduu:6PpnTwnNVe6mzXL4crGGDJxnvszBTdu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 022b77d323c6eedc22e4d2b69a4da6e0_JaffaCakes118
Files
-
022b77d323c6eedc22e4d2b69a4da6e0_JaffaCakes118.dll windows:5 windows x86 arch:x86
13ec09ef1ec703e1e6fb957efdde2d36
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetErrorMode
SetEvent
SetFileAttributesW
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
SetCurrentDirectoryW
WaitForMultipleObjects
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
SearchPathW
RemoveDirectoryW
QueryPerformanceCounter
OutputDebugStringA
OpenEventW
MulDiv
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GlobalFree
GlobalAlloc
GetVersionExW
GetTickCount
GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetNumberFormatW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLastError
GetFileAttributesW
GetExitCodeThread
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCommandLineW
FreeLibrary
FormatMessageW
FindNextFileW
FindFirstFileW
FindClose
ExitProcess
DeleteFileW
CreateThread
CreateProcessW
CreateMutexW
CreateFileMappingW
CreateEventW
CloseHandle
GetStartupInfoA
VirtualAlloc
GetWindowsDirectoryW
lstrcatW
UnhandledExceptionFilter
CreateFileW
user32
GetUserObjectInformationW
GetWindowLongW
GetWindowRect
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InvalidateRect
IsChild
IsDlgButtonChecked
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
KillTimer
LoadAcceleratorsW
LoadCursorW
LoadImageW
LoadStringA
LoadStringW
MapVirtualKeyExW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
OpenDesktopW
OpenInputDesktop
OpenWindowStationW
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassExW
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
SendDlgItemMessageW
SendInput
SendMessageW
SetCapture
SetClassLongW
SetCursor
SetFocus
SetForegroundWindow
SetMessageQueue
SetProcessWindowStation
SetThreadDesktop
SetTimer
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
ShowWindow
ToUnicodeEx
TranslateAcceleratorW
TranslateMessage
UnregisterClassW
UpdateWindow
WaitMessage
WinHelpW
wsprintfA
wsprintfW
GetUpdateRect
GetThreadDesktop
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetProcessWindowStation
GetParent
GetNextDlgTabItem
GetMessageW
GetMenu
GetLastActivePopup
GetKeyboardType
GetKeyboardLayout
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassInfoW
GetAsyncKeyState
FindWindowW
FillRect
ExitWindowsEx
EnumThreadWindows
EnumChildWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawIconEx
DrawIcon
DrawFocusRect
DrawEdge
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
CreateWindowExW
CreateDialogParamW
CopyRect
CloseWindowStation
CloseDesktop
ChildWindowFromPointEx
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharPrevW
CharNextW
CallWindowProcW
BringWindowToTop
BeginPaint
AllowSetForegroundWindow
ActivateKeyboardLayout
LoadIconW
LoadIconA
GetWindow
gdi32
TextOutW
StretchBlt
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
RealizePalette
Polyline
GetTextMetricsW
GetObjectW
GetMapMode
GetDeviceCaps
DeleteObject
DeleteDC
DPtoLP
GetStockObject
CreateRoundRectRgn
CreatePenIndirect
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
CreateSolidBrush
comdlg32
ChooseFontW
advapi32
AdjustTokenPrivileges
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyW
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
FreeSid
CheckTokenMembership
RegOpenKeyExW
AddAccessAllowedAce
AllocateAndInitializeSid
shell32
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteW
ole32
CoInitialize
CoUninitialize
CoCreateInstance
shlwapi
PathIsURLW
PathIsFileSpecW
msvcrt
_exit
wcscpy
swscanf
setlocale
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_ftol
_initterm
_vsnwprintf
_wcsicmp
_wmakepath
_wsplitpath
_wtoi
exit
free
malloc
memmove
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ