Static task
static1
Behavioral task
behavioral1
Sample
0a6639188633348c6ba907699756acf0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0a6639188633348c6ba907699756acf0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0a6639188633348c6ba907699756acf0_JaffaCakes118
-
Size
232KB
-
MD5
0a6639188633348c6ba907699756acf0
-
SHA1
747c10f6233fb1957da3b00ecb33c62d9ab4be94
-
SHA256
c53ebd2be2cbf83c52c67a45fb29aff0a7ceec8c8f2544470b26cdc6bd37a3ff
-
SHA512
d96ab2b65729948f43a85b75b429669080e28159fb7aec7c28280be92f60cf40b6ca17a17e810b4f009dbeecab865d9adfaac52e9a4e6d6530d80a44bbace3c3
-
SSDEEP
3072:D/9KuJdhOymWKQ0EkmgIsf27n01y9/PFhJhev6PT2jZTk9wE/MF1eErGJ/onYVyG:D1O91yZPFJPT2i9dMlr8VylFradylJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a6639188633348c6ba907699756acf0_JaffaCakes118
Files
-
0a6639188633348c6ba907699756acf0_JaffaCakes118.dll windows:4 windows x86 arch:x86
5fec7b0ca408b1703d201941026b28a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
LoadKeyboardLayoutA
FrameRect
DrawTextA
SetWindowLongW
EmptyClipboard
SetClassLongA
IsRectEmpty
IsWindow
WindowFromPoint
SendMessageA
ChildWindowFromPoint
GetParent
GetMenuItemInfoA
GetDC
GetWindowRect
DrawMenuBar
RegisterClassA
IsDialogMessageA
SetWindowsHookExA
PeekMessageA
CreatePopupMenu
DrawIconEx
GetSystemMenu
GetMenuState
MessageBoxA
GetDlgItem
GetSysColor
TranslateMDISysAccel
GetMessagePos
CreateWindowExA
AdjustWindowRectEx
SetRect
GetKeyNameTextA
MapVirtualKeyA
SetScrollPos
CharNextW
DestroyMenu
GetCapture
CharToOemA
GetTopWindow
ScrollWindow
GetScrollInfo
CloseClipboard
DestroyIcon
PtInRect
InsertMenuItemA
PostMessageA
DrawAnimatedRects
GetSystemMetrics
CharNextA
GetSysColorBrush
InflateRect
GetKeyboardLayoutNameA
GetCursor
SystemParametersInfoA
DefMDIChildProcA
ActivateKeyboardLayout
ClientToScreen
LoadIconA
SetTimer
SetWindowPos
SetClipboardData
IsWindowUnicode
DrawIcon
GetClassNameA
EnableScrollBar
SetCapture
DestroyWindow
DefFrameProcA
GetWindowThreadProcessId
CreateMenu
InvalidateRect
SetMenuItemInfoA
EnableWindow
GetScrollPos
wsprintfA
GetSubMenu
IsDialogMessageW
GetKeyboardLayoutList
TrackPopupMenu
SetWindowTextA
GetDCEx
GetForegroundWindow
DestroyCursor
MapWindowPoints
EnableMenuItem
GetDesktopWindow
SetScrollInfo
GetWindowLongA
InsertMenuA
OffsetRect
LoadCursorA
RedrawWindow
ReleaseDC
SetMenu
UpdateWindow
IsIconic
MsgWaitForMultipleObjects
GetWindowPlacement
FillRect
FindWindowA
ShowScrollBar
GetPropA
EnumThreadWindows
UnregisterClassA
CharLowerBuffA
IsWindowVisible
RegisterClipboardFormatA
EnumWindows
ShowWindow
EndPaint
GetMenuItemID
SetForegroundWindow
GetClientRect
SetPropA
RegisterWindowMessageA
GetCursorPos
GetKeyboardType
GetWindowDC
IntersectRect
SetWindowLongA
GetLastActivePopup
CharLowerA
IsWindowEnabled
OemToCharA
RemoveMenu
shell32
SHFileOperationA
kernel32
lstrlenA
ExitThread
SetEndOfFile
SetThreadLocale
lstrcmpA
GetProcAddress
GetACP
GetSystemDefaultLangID
LocalAlloc
GetVersionExA
LoadLibraryA
LoadLibraryExA
GetModuleHandleA
VirtualAllocEx
GetOEMCP
VirtualFree
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 337B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 1024B - Virtual size: 551B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ