Static task
static1
Behavioral task
behavioral1
Sample
03f2c6543a948608ff7c069b0b689585_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03f2c6543a948608ff7c069b0b689585_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
03f2c6543a948608ff7c069b0b689585_JaffaCakes118
-
Size
172KB
-
MD5
03f2c6543a948608ff7c069b0b689585
-
SHA1
78e22923aac7c71011d25fba782511fb30f9a491
-
SHA256
f9409881bb0ec7062aebeb73e8f13acb23097531fecd0ea1d1470b40769d660b
-
SHA512
b5f7af53cadbd8d4254a0eb12a198b29c74fae43e764b49d1d8c904ffb0b8951aedca6679a2fb923c4bbd9626689c61a4a184f2ba31e6852b7553fd8d5c9ed21
-
SSDEEP
3072:TEgffffffbffffJf/fjffffffffffffvfffffMH6qsTcLg2XvqaF2MIyg5giXZYe:4gffffffbffffJf/fjffffffffffffvh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03f2c6543a948608ff7c069b0b689585_JaffaCakes118
Files
-
03f2c6543a948608ff7c069b0b689585_JaffaCakes118.dll windows:5 windows x86 arch:x86
a4b1f983ad475d9929f72a65d8365d97
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetStartupInfoW
VirtualAllocEx
lstrlenW
MulDiv
LoadLibraryA
GetVersionExA
GetTickCount
CreateFileW
GetProcAddress
GetModuleHandleW
GetLastError
GetCurrentThreadId
CreateEventW
CloseHandle
user32
GetIconInfo
GetKeyState
GetMessagePos
GetProcessWindowStation
GetSubMenu
GetSystemMenu
GetSystemMetrics
GetThreadDesktop
GetUserObjectInformationW
GetWindowRect
InflateRect
IntersectRect
InvalidateRect
IsIconic
GetDC
IsWindow
KillTimer
LoadCursorW
LoadIconW
LoadMenuW
MessageBoxW
OpenClipboard
OpenDesktopW
OpenInputDesktop
OpenWindowStationW
PostMessageW
PtInRect
RegisterHotKey
RegisterWindowMessageW
ReleaseDC
SendMessageW
SetClipboardData
SetCursor
SetForegroundWindow
SetProcessWindowStation
SetRect
SetRectEmpty
SetThreadDesktop
SetTimer
SetWindowLongW
SystemParametersInfoW
UnregisterHotKey
WinHelpW
GetCursorPos
GetClientRect
GetAsyncKeyState
GetActiveWindow
FillRect
EqualRect
EnableWindow
EnableMenuItem
EmptyClipboard
DrawIcon
CopyRect
CloseDesktop
CloseClipboard
ClientToScreen
AppendMenuW
AdjustWindowRectEx
SetScrollRange
SetScrollPos
ScrollWindow
UpdateWindow
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
LoadIconA
CreateWindowExA
IsRectEmpty
gdi32
GetObjectW
GetStockObject
PatBlt
RealizePalette
GetDeviceCaps
SetBitmapDimensionEx
StretchBlt
ExtTextOutW
DeleteObject
CreatePalette
CreateFontIndirectW
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
advapi32
RegQueryValueExA
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExA
RegOpenKeyExW
shell32
ShellExecuteW
SHAppBarMessage
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ