LogPosToNormalPos
Static task
static1
Behavioral task
behavioral1
Sample
0903d037c52d57b1a06f6f64c00105cd_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0903d037c52d57b1a06f6f64c00105cd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0903d037c52d57b1a06f6f64c00105cd_JaffaCakes118
-
Size
232KB
-
MD5
0903d037c52d57b1a06f6f64c00105cd
-
SHA1
aeae234222d3303ffa338c0423470435ac96617b
-
SHA256
8dbc931c9f981733c37d9c2be682fe64119a20586eadebf712c64e9ca4604e33
-
SHA512
e677f78bd1cc4ab742baecadda7e031121559e4f6e413a29bbacb9a96ed7bde184ee38afdcb32a4587085de3042eafc36d8c2892a6e3dd751e5ba5abacc738d7
-
SSDEEP
6144:LSSTpfELuYi8N2/mqmpxEkUxbR+DKyv9Ykcjs:h4uYb52knDKyvwI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0903d037c52d57b1a06f6f64c00105cd_JaffaCakes118
Files
-
0903d037c52d57b1a06f6f64c00105cd_JaffaCakes118.dll windows:4 windows x86 arch:x86
e4413cfbe420f13dafc69efb777a6990
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
EnterCriticalSection
ExitProcess
ExitThread
FatalAppExitA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCommandLineA
GetCommandLineW
GetCurrentProcess
GetModuleHandleA
GetNumberFormatA
GetVersionExA
HeapAlloc
HeapCreate
InitializeCriticalSection
IsDebuggerPresent
IsValidCodePage
LCMapStringW
LoadLibraryA
OpenEventA
RtlUnwind
SetErrorMode
SetHandleCount
SetProcessWorkingSetSize
SizeofResource
Sleep
TerminateProcess
TlsFree
VirtualFree
WaitForSingleObject
WriteConsoleA
lstrcpyA
lstrlenW
advapi32
ClearEventLogW
CreateWellKnownSid
CryptExportKey
CryptGetHashParam
EnumDependentServicesA
GetAccessPermissionsForObjectW
GetSecurityDescriptorSacl
LsaDeleteTrustedDomain
MakeAbsoluteSD
QueryServiceLockStatusA
RegOpenKeyA
RemoveUsersFromEncryptedFile
SetTraceCallback
user32
GetWindowRect
GetWindowTextA
LoadCursorA
ModifyMenuA
GetDlgCtrlID
SetCursor
SetFocus
SetForegroundWindow
GetCapture
FindWindowExA
FindWindowA
EmptyClipboard
CreateWindowExA
DispatchMessageA
ClientToScreen
RemoveMenu
wsprintfA
ole32
CoMarshalInterface
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CoBuildVersion
IsEqualGUID
ddraw
DSoundHelp
DirectDrawCreateEx
Exports
Exports
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ