Static task
static1
Behavioral task
behavioral1
Sample
089d9e854370ae304b96bf7be5b5b790_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
089d9e854370ae304b96bf7be5b5b790_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
089d9e854370ae304b96bf7be5b5b790_JaffaCakes118
-
Size
212KB
-
MD5
089d9e854370ae304b96bf7be5b5b790
-
SHA1
4bd2b7cb4d5c1218f7be5ae2102a59680f6fc4fe
-
SHA256
862f07534bf2be718a70936d24d5b1133e1044fe36d4f5dd110d3a475784630d
-
SHA512
735f1ec77dfb50ccbfe586296b5a02d8ace133189daf3c13c556d83209972e34b65624cc5a08761df6ddad908e48f4f9a5dc03872e5aef9e3e5ff00c8505aa3c
-
SSDEEP
3072:rTJztPmNhnIiaDCjqW9DKZr9+VwYddG+czMoKfF3:NxmL1aDMqQDK6Ce84t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 089d9e854370ae304b96bf7be5b5b790_JaffaCakes118
Files
-
089d9e854370ae304b96bf7be5b5b790_JaffaCakes118.dll windows:5 windows x86 arch:x86
5566fb1f6405a2b6cf03eae8e827918e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
lstrcatW
VirtualAllocEx
GetWindowsDirectoryW
user32
BeginPaint
UpdateWindow
ScrollWindow
SetScrollPos
SetScrollRange
ReleaseDC
GetDC
AppendMenuA
CallMsgFilterW
CascadeWindows
ChangeDisplaySettingsW
CharToOemA
CheckMenuItem
CloseDesktop
CopyAcceleratorTableA
CopyRect
CreateIconFromResourceEx
CreateMDIWindowA
DdeClientTransaction
DdeCreateStringHandleW
DdeFreeStringHandle
DdePostAdvise
DdeSetQualityOfService
DeregisterShellHookWindow
DrawStateW
EndDialog
EndMenu
EnumChildWindows
GetAltTabInfo
GetClassLongW
GetClipboardOwner
GetComboBoxInfo
GetInputState
EndPaint
GetMessageA
GetScrollPos
GetScrollRange
GetSubMenu
GetUpdateRect
GetWindowRgn
GetWindowThreadProcessId
IMPQueryIMEA
InSendMessageEx
InsertMenuItemA
IsCharUpperW
IsDialogMessageA
LoadKeyboardLayoutW
LockWorkStation
MoveWindow
OemToCharBuffW
RegisterClassExA
RegisterDeviceNotificationW
RemoveMenu
ScrollDC
SendDlgItemMessageA
SendMessageW
SendNotifyMessageW
SetDlgItemTextW
SetWindowWord
SystemParametersInfoW
TabbedTextOutA
TileWindows
ToAscii
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
VkKeyScanA
VkKeyScanExA
WaitForInputIdle
WindowFromDC
PostQuitMessage
DefWindowProcA
LoadIconA
CreateWindowExA
GetKeyboardLayout
gdi32
TextOutA
GetTextMetricsA
advapi32
RegOpenKeyExA
Sections
.text Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ