GetObjectData
Static task
static1
Behavioral task
behavioral1
Sample
06be29e6bfd1bc8241a29a776651f2d1_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
06be29e6bfd1bc8241a29a776651f2d1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
06be29e6bfd1bc8241a29a776651f2d1_JaffaCakes118
-
Size
228KB
-
MD5
06be29e6bfd1bc8241a29a776651f2d1
-
SHA1
efd0bfbd6ef7f64b546a8b5f6f7af395baefeabf
-
SHA256
d2a42d5cd5b7eb7457712a52b3c37e17dedc0329897b5e06744cf9192f984869
-
SHA512
e169186116a6e96f1166e91474a0124c5c43aaa198e0fa0eb4059e17af98602e5e44d7587da7334df61d188eb1fd9ccde633fc5abc29057c52712d781d17bb61
-
SSDEEP
3072:cOa5EEhFLZHfbFht1A2gHVjR82iU3UpSfSOTC+W3o+NQeL87fSZcZzr0F7ofPaHo:+/7ZHfZht1m1rES9up4BLWuz4C3qKz9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06be29e6bfd1bc8241a29a776651f2d1_JaffaCakes118
Files
-
06be29e6bfd1bc8241a29a776651f2d1_JaffaCakes118.dll windows:4 windows x86 arch:x86
ac14d1f6cfcccf83691f0aa0a88864df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DuplicateHandle
ExitProcess
FatalAppExitA
FindFirstFileA
GetCommandLineA
GetCommandLineW
GetExitCodeThread
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcessAffinityMask
GetProcessHeap
GetProcessWorkingSetSize
GetTickCount
GetVersionExA
GlobalLock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
LeaveCriticalSection
LoadLibraryA
ReadProcessMemory
ResumeThread
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetThreadAffinityMask
Sleep
TerminateProcess
TerminateThread
VirtualFree
lstrcatA
lstrcmpA
lstrcpyA
lstrcpynA
advapi32
AccessCheckAndAuditAlarmA
BuildTrusteeWithNameW
CreateServiceA
EqualSid
GetExplicitEntriesFromAclA
GetFileSecurityA
GetTrusteeTypeA
LogonUserW
LsaSetTrustedDomainInfoByName
OpenThreadToken
RegisterTraceGuidsA
SetSecurityDescriptorOwner
user32
ShowWindow
SetScrollInfo
GetMessageA
PtInRect
OpenClipboard
LoadCursorA
IntersectRect
GetKeyState
GetCapture
EnableWindow
DrawMenuBar
UpdateWindow
CheckMenuRadioItem
ole32
CoCreateGuid
IsEqualGUID
CreateAntiMoniker
CoGetContextToken
CoCreateInstance
ddraw
DirectDrawEnumerateA
DirectDrawCreateEx
DirectDrawCreateClipper
GetDDSurfaceLocal
Exports
Exports
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ