Static task
static1
Behavioral task
behavioral1
Sample
0772cfaabd429c6ed321a71610ae4eba_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0772cfaabd429c6ed321a71610ae4eba_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0772cfaabd429c6ed321a71610ae4eba_JaffaCakes118
-
Size
480KB
-
MD5
0772cfaabd429c6ed321a71610ae4eba
-
SHA1
77241452ef8e584ef7551cec8a5dcc6f285dc618
-
SHA256
752299814e3c49a624c46e3f28b15b488fb3f8c487e1a3c095fc2db92d442106
-
SHA512
53a7d92ae79cde63571db4713a71978e6b7030466e111c1b9e9ecab3a27adafdf2c479ed124d55e3ad814362ec920351928faa178989a28bbfabadd40ac773fc
-
SSDEEP
12288:G01Bhh3f1xDGnKdp6VEZjXRlQ8tg4pJGRnZxVQiP:G0j7DGnKdEGbRtg4pIvxBP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0772cfaabd429c6ed321a71610ae4eba_JaffaCakes118
Files
-
0772cfaabd429c6ed321a71610ae4eba_JaffaCakes118.dll windows:4 windows x86 arch:x86
09c0ef9fac58ea3241dac2b0f9c82790
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_adjust_fdiv
_itoa
fgets
_unlink
_purecall
wcsrchr
__CxxFrameHandler
_EH_prolog
??2@YAPAXI@Z
memmove
toupper
memcpy
_ftol
sprintf
strchr
atan2
sqrt
_mbscmp
_mbsicmp
strlen
floor
strcpy
_CxxThrowException
strncmp
isalpha
atoi
sscanf
_mbsnbcpy
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
abs
fclose
fopen
_ismbcdigit
qsort
_stricmp
memset
fread
fputc
strcmp
fwrite
fseek
fflush
ftell
strrchr
fputs
fgetc
strncat
memchr
memcmp
_ismbcalnum
_mbsrchr
wcslen
iswalpha
strstr
iswalnum
_wcsnicoll
wcschr
_ltoa
??3@YAXPAX@Z
isspace
malloc
_initterm
free
_onexit
__dllonexit
??1type_info@@UAE@XZ
localtime
_strnicmp
getc
__p__environ
_spawnlpe
isdigit
wcsncpy
iswspace
atof
rand
isalnum
time
srand
_mbsinc
wcscspn
wcscat
atol
mso9
ord1870
ord1290
ord688
ord925
ord1546
ord887
ord1547
ord929
ord1956
ord1325
ord1864
ord1552
ord1507
ord933
ord1818
ord1863
ord1550
ord1406
ord1378
ord1836
ord844
ord1813
ord269
mfc42
ord2124
ord2446
ord2982
ord3147
ord5261
ord5277
ord4465
ord3259
ord3262
ord2985
ord3081
ord2976
ord3402
ord3136
ord3831
ord3825
ord3079
ord3830
ord4627
ord4424
ord567
ord818
ord397
ord6143
ord801
ord541
ord4224
ord5651
ord3130
ord4080
ord1567
ord2141
ord268
ord350
ord3663
ord809
ord3676
ord2023
ord4218
ord2578
ord4398
ord3582
ord616
ord6880
ord3815
ord2575
ord4396
ord3574
ord609
ord4275
ord2078
ord4299
ord2379
ord3571
ord3626
ord613
ord640
ord2414
ord5789
ord2754
ord2411
ord5873
ord5794
ord5785
ord1640
ord323
ord1641
ord289
ord922
ord4129
ord4277
ord2763
ord6241
ord3721
ord795
ord6172
ord755
ord5781
ord470
ord6197
ord665
ord1979
ord5186
ord354
ord768
ord4083
ord2642
ord3092
ord2864
ord4234
ord1816
ord5265
ord4998
ord6052
ord1775
ord4425
ord5065
ord1727
ord641
ord5280
ord1168
ord3089
ord4853
ord4376
ord4710
ord2514
ord1908
ord1690
ord4439
ord2054
ord3386
ord4431
ord498
ord496
ord771
ord6199
ord4160
ord4715
ord2528
ord4287
ord5288
ord3706
ord1907
ord5161
ord5162
ord5160
ord4905
ord4976
ord4948
ord4358
ord4835
ord3385
ord491
ord489
ord2038
ord5287
ord4742
ord4854
ord2646
ord4377
ord1175
ord4774
ord3643
ord394
ord696
ord3745
ord293
ord3573
ord324
ord5791
ord2860
ord2567
ord5788
ord5787
ord2513
ord2818
ord5856
ord3435
ord2614
ord5981
ord6605
ord3619
ord2452
ord2080
ord5875
ord5710
ord472
ord3317
ord1146
ord3692
ord2859
ord6140
ord1771
ord6366
ord2413
ord4401
ord3639
ord692
ord283
ord3742
ord699
ord5593
ord3438
ord2116
ord6442
ord2302
ord912
ord4188
ord3716
ord790
ord2113
ord6358
ord3812
ord1871
ord2882
ord556
ord6379
ord2122
ord3021
ord3216
ord3027
ord6385
ord5683
ord6282
ord4042
ord1705
ord1706
ord4133
ord4297
ord2358
ord2301
ord6334
ord4202
ord6223
ord6283
ord3873
ord3876
ord3610
ord656
ord2065
ord6883
ord2587
ord4406
ord3394
ord3729
ord804
ord6215
ord2119
ord2915
ord3874
ord2652
ord1669
ord1802
ord1829
ord4123
ord4317
ord4278
ord2764
ord2784
ord4204
ord6119
ord2089
ord2243
ord3126
ord2055
ord2450
ord304
ord3801
ord1124
ord1123
ord315
ord3160
ord2154
ord2582
ord4402
ord3640
ord693
ord3996
ord5861
ord5608
ord3286
ord6905
ord925
ord3301
ord3797
ord4243
ord6453
ord6781
ord6144
ord6141
ord559
ord414
ord713
ord812
ord5859
ord2571
ord5450
ord6394
ord5440
ord6383
ord3396
ord3731
ord3370
ord501
ord384
ord808
ord686
ord773
ord4284
ord955
ord924
ord6907
ord2862
ord2097
ord2152
ord981
ord3749
ord6222
ord926
ord1083
ord2841
ord2107
ord1601
ord610
ord2024
ord4219
ord2581
ord2370
ord3803
ord1930
ord6154
ord2530
ord4365
ord4056
ord5471
ord4121
ord2389
ord5085
ord1709
ord1714
ord4404
ord5234
ord6369
ord5279
ord5258
ord2444
ord3722
ord529
ord796
ord4265
ord3483
ord6069
ord3809
ord5857
ord6139
ord287
ord398
ord700
ord5594
ord913
ord4189
ord2405
ord4330
ord4023
ord3693
ord396
ord698
ord1847
ord6194
ord6021
ord1182
ord342
ord4185
ord909
ord1929
ord765
ord923
ord3127
ord3616
ord5442
ord1194
ord1150
ord3495
ord996
ord1099
ord3439
ord6663
ord2867
ord4268
ord3289
ord816
ord562
ord4873
ord2380
ord4759
ord3752
ord1942
ord4589
ord4588
ord4899
ord4370
ord4892
ord4532
ord5076
ord4341
ord4349
ord4723
ord4890
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4964
ord4108
ord5240
ord3748
ord1726
ord5259
ord4432
ord303
ord813
ord4272
ord6242
ord3597
ord3698
ord2086
ord4047
ord6380
ord1233
ord5823
ord3664
ord415
ord1081
ord715
ord5597
ord5605
ord2761
ord2826
ord798
ord1920
ord4889
ord4963
ord4960
ord1725
ord5260
ord6131
ord517
ord784
ord5852
ord5766
ord3755
ord4262
ord6216
ord3076
ord5037
ord3075
ord2848
ord3496
ord5631
ord6195
ord3870
ord533
ord5681
ord2645
ord1087
ord4036
ord3811
ord1949
ord4034
ord4644
ord4217
ord2576
ord4397
ord3352
ord3577
ord2299
ord4258
ord6028
ord5890
ord2937
ord551
ord6376
ord4837
ord2648
ord4441
ord4353
ord3798
ord5290
ord2385
ord6374
ord5163
ord1776
ord5241
ord4407
ord2135
ord4078
ord6055
ord5575
ord941
ord434
ord939
ord539
ord940
ord5572
ord800
ord2919
ord858
ord861
ord859
ord860
ord537
ord1158
ord535
ord538
ord536
ord3613
ord540
ord2393
kernel32
GetProcAddress
RaiseException
LocalAlloc
lstrlenW
GetTempFileNameA
Sleep
GetTempPathA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetLastError
CreateDirectoryA
GetVersion
SetFileAttributesA
GetSystemDefaultLCID
lstrcatA
GetUserDefaultLCID
WideCharToMultiByte
FindFirstFileA
FindNextFileA
FindClose
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
FormatMessageA
LocalFree
GetSystemDefaultLangID
GetUserDefaultLangID
MoveFileA
GetVersionExA
IsValidCodePage
WritePrivateProfileStringA
GetPrivateProfileSectionA
OpenFile
lstrcmpA
GetTickCount
GetACP
IsDBCSLeadByte
MulDiv
GetPrivateProfileStringA
SizeofResource
InterlockedExchange
lstrcpynA
DeleteFileA
MultiByteToWideChar
GlobalAlloc
GetFileAttributesA
GlobalSize
lstrcmpiA
FindResourceA
CopyFileA
lstrlenA
lstrcpyA
LoadResource
_lread
_lclose
_lopen
GlobalLock
GlobalUnlock
LockResource
LoadLibraryA
FreeLibrary
ExitProcess
GlobalFree
user32
GetDC
LoadBitmapA
GetClipboardData
OpenClipboard
ShowCaret
CloseClipboard
GetKeyboardLayout
CharToOemA
HideCaret
GetWindowDC
wsprintfA
UnionRect
GetSysColorBrush
TranslateMessage
DispatchMessageA
ValidateRect
SystemParametersInfoA
GetUpdateRect
GetForegroundWindow
SetTimer
KillTimer
GetDialogBaseUnits
LoadStringA
MapDialogRect
MessageBoxA
GetClassLongA
SetClassLongA
SetWindowPos
GetTopWindow
SetWindowLongA
SetCursor
GetWindowLongA
PeekMessageA
LoadCursorA
GetCaretPos
GetDesktopWindow
IsRectEmpty
IntersectRect
EqualRect
GetDlgItem
SetRect
RegisterClipboardFormatA
ClientToScreen
GetNextDlgTabItem
IsWindowVisible
GetFocus
GetCapture
ChildWindowFromPoint
GetAsyncKeyState
UpdateWindow
ReleaseCapture
FillRect
SetCapture
PostMessageA
ReleaseDC
GetCursorPos
ScreenToClient
IsWindow
GetSystemMetrics
SetRectEmpty
OffsetRect
PtInRect
CopyRect
InflateRect
DrawFocusRect
GetLastActivePopup
GetClassNameA
GetWindow
GetWindowContextHelpId
WinHelpA
GetKeyState
GetParent
GetClientRect
RedrawWindow
InvalidateRect
LoadImageA
GetSysColor
SendMessageA
GetWindowRect
EnableWindow
FindWindowA
IsClipboardFormatAvailable
CharNextA
gdi32
Polyline
UnrealizeObject
GetTextExtentPointA
CreateDCA
SetBkColor
SetDIBits
GetMapMode
GetViewportExtEx
GetViewportOrgEx
GetSystemPaletteEntries
SetMapMode
LPtoDP
GetDeviceCaps
SetViewportExtEx
PlayMetaFile
DeleteDC
GetCurrentObject
EnumFontFamiliesA
EnumFontFamiliesExA
CreateDIBSection
GdiFlush
CreateBrushIndirect
GetBkColor
GetBitmapDimensionEx
ExtTextOutA
BitBlt
GetTextFaceA
CreateFontIndirectA
GetTextColor
CreateBitmap
CreatePolygonRgn
Polygon
CreatePenIndirect
CreateEllipticRgnIndirect
RectInRegion
Ellipse
CreatePalette
SetStretchBltMode
SetDIBitsToDevice
StretchDIBits
SetPixelV
Arc
CreateHalftonePalette
SelectPalette
CreateSolidBrush
DeleteObject
CreatePen
GetPaletteEntries
GetNearestPaletteIndex
SelectObject
GetTextMetricsA
GetStockObject
PatBlt
Rectangle
CreatePatternBrush
RealizePalette
CreateRectRgnIndirect
GetBitmapBits
CreateBitmapIndirect
GetPixel
SetPixel
GetTextExtentPoint32A
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
advapi32
RegSetValueExA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
msvcirt
??1istrstream@@UAE@XZ
??0istrstream@@QAE@PAD@Z
??1ios@@UAE@XZ
?open@ofstream@@QAEXPBDHH@Z
?read@istream@@QAEAAV1@PADH@Z
?write@ostream@@QAEAAV1@PBDH@Z
??0ofstream@@QAE@XZ
?tellg@istream@@QAEJXZ
?seekg@istream@@QAEAAV1@JW4seek_dir@ios@@@Z
?clear@ios@@QAEXH@Z
?seekg@istream@@QAEAAV1@J@Z
??6ostream@@QAEAAV0@PBD@Z
??6ostream@@QAEAAV0@E@Z
?get@istream@@QAEHXZ
??1ofstream@@UAE@XZ
??0ofstream@@QAE@PBDHH@Z
?close@ofstream@@QAEXXZ
??1ifstream@@UAE@XZ
?openprot@filebuf@@2HB
??0ifstream@@QAE@PBDHH@Z
?close@ifstream@@QAEXXZ
?get@istream@@QAEAAV1@AAD@Z
?peek@istream@@QAEHXZ
Sections
.text Size: 380KB - Virtual size: 377KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ