Static task
static1
Behavioral task
behavioral1
Sample
04943ac476a775a34df51739f59c2a24_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04943ac476a775a34df51739f59c2a24_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
04943ac476a775a34df51739f59c2a24_JaffaCakes118
-
Size
112KB
-
MD5
04943ac476a775a34df51739f59c2a24
-
SHA1
918ff00f10e5ccc1b6f908abd3ba5e7f74c68d46
-
SHA256
625d0dd45a40265c4eb623aa2396ac3536cf53b119b195d9c7d23b5ecc4a80ab
-
SHA512
9f7a5e2b77ef852bc2955f7d970775874900fba16fe15791ebc22b5037b86d7763bb49cee5c2d720d8f691554b7b306dd97e3ac8447e6c359dbb2d4e3f8a18f5
-
SSDEEP
3072:lJHB90kIq4S0aRA9GwNBxCtHJdb2wv7fYl4ely60:l9T0kR4iMGwNanbn7YKeb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04943ac476a775a34df51739f59c2a24_JaffaCakes118
Files
-
04943ac476a775a34df51739f59c2a24_JaffaCakes118.dll windows:4 windows x86 arch:x86
a3d8f6915139397107ebc99888a5a99f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
winmm
PlaySoundW
WOW32DriverCallback
midiInStart
midiOutSetVolume
mmioInstallIOProcA
mod32Message
waveOutRestart
waveOutUnprepareHeader
ole32
PropVariantClear
IsEqualGUID
advapi32
SetUserFileEncryptionKey
SetSecurityDescriptorDacl
RegisterEventSourceA
RegQueryValueExA
OpenTraceW
LsaSetInformationTrustedDomain
LsaRemoveAccountRights
LookupPrivilegeNameW
I_ScSetServiceBitsA
GetTrusteeNameW
GetSecurityDescriptorDacl
GetAclInformation
GetAce
FileEncryptionStatusA
AddAccessDeniedAce
dinput
DirectInputCreateW
ws2_32
closesocket
socket
htons
WSAGetLastError
WSAUnhookBlockingHook
WSCDeinstallProvider
connect
gethostbyname
user32
SetSystemCursor
ShowWindow
UpdateWindow
RegisterWindowMessageW
RegisterShellHookWindow
RegisterClassA
PeekMessageA
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxW
GetTopWindow
GetKeyState
GetForegroundWindow
GetCaretPos
EnumPropsA
EmptyClipboard
DispatchMessageA
DialogBoxParamA
DefWindowProcA
CreateWindowExA
CharToOemA
CharLowerBuffA
BeginDeferWindowPos
kernel32
MulDiv
OpenEventW
OpenJobObjectW
ReadFile
SetEnvironmentVariableA
SetFileTime
HeapCreate
WaitForMultipleObjectsEx
lstrcmpA
CreateSemaphoreA
CloseHandle
BindIoCompletionCallback
GetModuleHandleA
TlsGetValue
HeapAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVersionExA
GetTimeZoneInformation
GetTempPathW
GetSystemInfo
GetSystemDefaultLangID
GetStringTypeExA
GetPrivateProfileSectionW
DeleteCriticalSection
GetFileAttributesExA
GetCurrentProcessId
GetConsoleOutputCP
GetConsoleAliasA
GetCommandLineA
GetBinaryTypeA
FormatMessageA
FlushConsoleInputBuffer
FindNextVolumeW
FindAtomW
FindAtomA
ExitProcess
EnumTimeFormatsA
DuplicateHandle
Beep
shell32
SHGetSpecialFolderPathW
ShellExecuteA
SHFileOperationW
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ