Static task
static1
Behavioral task
behavioral1
Sample
02c917f724a0f7324df5df54b7e9207a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02c917f724a0f7324df5df54b7e9207a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
02c917f724a0f7324df5df54b7e9207a_JaffaCakes118
-
Size
208KB
-
MD5
02c917f724a0f7324df5df54b7e9207a
-
SHA1
8fb1296c41de4426c67754c09f71b57967df91a6
-
SHA256
dfc60b65e366b505326dbf327e869e21e45b76a3febf9363bd3a1fb043de74e3
-
SHA512
2234a966d7921f8b6d5e8e8396c480388bfff6c96e009b491ee0a552e4f0b71b364f6c251498fc03eb4e1a9ee01bfe6a7bb5e2e8b410cd83549510ad7a835273
-
SSDEEP
3072:gAVZqDKYCd6EKUm9CwWXnMlr+XS+gFRTAkD2If2Lv90ZK1CNV8EoLkPHJecwMNFG:gsZqlJLfKMiux9HMeZK1CN5UkPkc9Wf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02c917f724a0f7324df5df54b7e9207a_JaffaCakes118
Files
-
02c917f724a0f7324df5df54b7e9207a_JaffaCakes118.dll windows:4 windows x86 arch:x86
8f5709418e85085fb4eda44fda9d101b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gdi32
CreateDIBSection
SetPixel
SetBkColor
CreateCompatibleBitmap
LineTo
SaveDC
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
user32
IsWindowVisible
IsWindow
SetWindowPos
SetCursor
MessageBoxA
DrawIcon
OemToCharA
GetForegroundWindow
GetMenuItemID
GetMenuState
InvalidateRect
AdjustWindowRectEx
SetPropA
SetWindowLongW
EnableWindow
CallWindowProcA
GetClipboardData
DeleteMenu
GetKeyboardState
GetKeyboardLayout
IsWindowEnabled
DrawTextA
GetDC
PostQuitMessage
SetScrollPos
ScrollWindow
DrawFrameControl
SetFocus
EmptyClipboard
GetSystemMenu
SetActiveWindow
InflateRect
SetWindowsHookExA
PeekMessageW
WindowFromPoint
SetCapture
GetSystemMetrics
GetParent
IntersectRect
GetWindowLongW
wsprintfA
IsZoomed
SetTimer
ActivateKeyboardLayout
MapWindowPoints
DrawAnimatedRects
UnregisterClassA
FrameRect
SetWindowLongA
GetCapture
DestroyMenu
GetWindowRect
CharLowerBuffA
TrackPopupMenu
MoveWindow
SetRect
IsDialogMessageW
RedrawWindow
SetWindowTextA
EnumChildWindows
GetWindowDC
RemovePropA
OffsetRect
SystemParametersInfoA
CharLowerA
GetDlgItem
EnableScrollBar
TranslateMDISysAccel
DrawEdge
GetKeyboardLayoutList
DispatchMessageW
GetWindowPlacement
OpenClipboard
PeekMessageA
ScreenToClient
LoadBitmapA
CreateWindowExA
ShowOwnedPopups
FindWindowA
DrawMenuBar
GetCursor
UnhookWindowsHookEx
GetTopWindow
GetDCEx
GetMenuStringA
LoadCursorA
IsChild
EnumThreadWindows
ChildWindowFromPoint
DestroyCursor
TranslateMessage
LoadIconA
CloseClipboard
GetMenuItemCount
ReleaseCapture
SetWindowPlacement
SetScrollInfo
DefWindowProcA
GetScrollPos
GetKeyState
GetWindowLongA
RegisterClassA
ClientToScreen
DrawIconEx
GetLastActivePopup
EnumWindows
IsWindowUnicode
GetClassLongA
CheckMenuItem
ReleaseDC
GetMessagePos
GetMenu
PtInRect
RegisterClipboardFormatA
kernel32
GlobalAlloc
CreateFileA
HeapDestroy
InitializeCriticalSection
LocalAlloc
GlobalDeleteAtom
GetCurrentProcess
CloseHandle
ExitProcess
SetFilePointer
GetLastError
GetOEMCP
GetStdHandle
VirtualAlloc
GetModuleHandleA
lstrlenA
GetProcAddress
shell32
Shell_NotifyIconA
Sections
CODE Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 95B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 825B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 1010B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ