Static task
static1
Behavioral task
behavioral1
Sample
034f00f9feb631bf3cc7d5e54bb1232d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
034f00f9feb631bf3cc7d5e54bb1232d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
034f00f9feb631bf3cc7d5e54bb1232d_JaffaCakes118
-
Size
209KB
-
MD5
034f00f9feb631bf3cc7d5e54bb1232d
-
SHA1
8d6af5eb476baf85f94b735a748a949f61c45f18
-
SHA256
6e3627364808ce35ea73aefa7540e8d21c1eb50cfc5e192403e975fd157060a3
-
SHA512
e35dd93a16f3f47f47eaa80c3dd1a215c96cde0e482848bc87b6b167cd28d3d8ac62855dfa01df858c1f726186694eb4304cac916bcb0e97abcf727587b647bc
-
SSDEEP
3072:x+3DQfZzcHUo1/QwyTLFmLCTnh8Puz9EEthax0hPYlZZldOSMDn:xsQfZzggTvz+u5EEthauP47OSMD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 034f00f9feb631bf3cc7d5e54bb1232d_JaffaCakes118
Files
-
034f00f9feb631bf3cc7d5e54bb1232d_JaffaCakes118.dll windows:4 windows x86 arch:x86
5a0b5ac2a25aa31e8559749d712496b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadConsoleW
DeleteFileW
GetComputerNameA
ReadFile
Sleep
GetConsoleMode
CreateDirectoryA
ExitThread
GetFileTime
WriteFile
ReadConsoleA
GetStdHandle
DeleteAtom
CreateThread
GetFileSize
ReadFile
CreateThread
WriteFile
GetLastError
CopyFileW
CopyFileExW
OpenFileMappingA
FindFirstFileA
GlobalFree
CopyFileExA
ReadConsoleA
GetComputerNameA
CopyFileA
GetFileTime
GetLastError
GetComputerNameA
ReadFile
CopyFileExW
GetCommandLineA
CopyFileW
CreateProcessA
Sleep
CopyFileA
CreateThread
FindFirstFileA
ExitThread
GetFileTime
CopyFileExA
ReadConsoleA
GetConsoleMode
CopyFileExW
GetLastError
CopyFileW
ReadFile
DeleteFileA
WriteFile
ReadConsoleW
ExitThread
GetCPInfo
CopyFileExA
DeleteFileW
OpenFile
FindAtomA
CreateDirectoryA
GetFileTime
CopyFileA
GlobalFree
FindFirstFileA
GetLastError
CreateProcessA
CopyFileW
CopyFileA
GetStdHandle
ExitThread
CopyFileExA
DeleteFileW
CopyFileExW
GetCommandLineA
user32
CloseWindow
GetCursor
CreateIcon
CopyIcon
LoadMenuA
DrawTextA
AppendMenuW
CopyRect
CalcMenuBar
GetDlgItem
LoadCursorA
GetWindowTextA
GetCursor
IsWindow
CreateIcon
GetFocus
GetWindowTextLengthA
GetMenu
CopyIcon
LoadCursorA
CloseWindow
EndDialog
AlignRects
GetWindowTextLengthA
CopyImage
IsMenu
DialogBoxParamW
EndDialog
DrawTextW
GetWindow
CopyRect
AppendMenuW
IsWindow
DrawIcon
DialogBoxParamA
DrawTextA
CreateIcon
AppendMenuA
GetDlgItem
GetCursor
advapi32
RegGetKeySecurity
RegCreateKeyExA
RegCloseKey
RegQueryValueW
RegFlushKey
RegEnumKeyA
RegLoadKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegQueryInfoKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyExA
RegDeleteKeyW
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyA
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegFlushKey
RegQueryInfoKeyW
RegQueryValueW
RegEnumKeyExA
RegCreateKeyW
RegDeleteKeyA
RegDeleteValueA
RegLoadKeyA
RegQueryValueA
Sections
.tls Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.b3671 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 307B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ