Static task
static1
Behavioral task
behavioral1
Sample
0dc3fedb7c22ef2247f222517950998e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0dc3fedb7c22ef2247f222517950998e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0dc3fedb7c22ef2247f222517950998e_JaffaCakes118
-
Size
225KB
-
MD5
0dc3fedb7c22ef2247f222517950998e
-
SHA1
069eb4d289aeeb83156077d469fd7e1222b94490
-
SHA256
0e4c1dc4d2acf1359d4357d2980ccb6745d61a64ee4f120b7ac9d6cd57597a3d
-
SHA512
cc933d8ca025d43bbc4d52c3fb48f953bc23912174c8f420af29deafda08c616e688d61bf2d62b5dcfe9b61b85be6ced9c63ede9172318afdd36efee81c425c2
-
SSDEEP
3072:51sg+zgZiIoaQf0DIw6bOZT8K9B+h85pzbpF980JwOJ8pTtV7U4qgc/J+Q72n7uT:516zgZMY6br8hpzbp/80aOSpATg4e8yq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dc3fedb7c22ef2247f222517950998e_JaffaCakes118
Files
-
0dc3fedb7c22ef2247f222517950998e_JaffaCakes118.dll windows:4 windows x86 arch:x86
46f8ec3475eddba2bddbb8e78e46bf5d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetConsoleMode
GetFileSize
GetCurrentThreadId
GetCurrentThread
GetConsoleOutputCP
GlobalFree
GetCommandLineA
ExitThread
DeleteFileW
ExitProcess
GetUserDefaultLangID
GetCPInfo
GetStdHandle
GetUserDefaultLCID
FindAtomA
GetComputerNameA
CopyFileW
GetLastError
OpenFile
CopyFileW
GetFileTime
CreateProcessA
GetCurrentThread
GetCurrentProcess
CreateThread
GetCurrentProcessId
GetComputerNameA
GetLastError
CreateDirectoryA
DeleteAtom
ExitProcess
GetConsoleOutputCP
GetStdHandle
GlobalFree
FindAtomA
DeleteFileW
GetConsoleMode
OpenFile
GetOEMCP
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
CreateThread
GetLastError
GetComputerNameA
FindAtomA
GetStdHandle
GetCommandLineA
ExitThread
ExitProcess
Sleep
DeleteFileW
CreateThread
GetCurrentProcessId
GetCurrentThread
OpenFile
GetFileSize
DeleteFileA
CreateProcessA
FindFirstFileA
ExitThread
GetLastError
GetConsoleOutputCP
GetCommandLineA
GlobalFree
ExitProcess
GetConsoleMode
GetStdHandle
GetCPInfo
GetCurrentProcess
GlobalFree
GetComputerNameA
CreateDirectoryA
GetOEMCP
GetConsoleMode
GetConsoleOutputCP
GetFileTime
ExitProcess
GetLastError
GetStdHandle
GetUserDefaultLangID
GetCPInfo
DeleteFileA
CreateDirectoryA
FindFirstFileA
ExitThread
GetStdHandle
OpenFile
GetOEMCP
CreateProcessA
FindAtomA
GetCurrentThreadId
GetConsoleMode
GetUserDefaultLangID
CopyFileW
GetFileSize
GetFileTime
GlobalFree
Sleep
DeleteAtom
user32
CopyIcon
BlockInput
CalcMenuBar
AlignRects
GetCursor
DrawTextA
DrawTextW
DialogBoxParamW
IsWindow
GetFocus
EndDialog
CreateIcon
GetDlgItem
CopyRect
CopyRect
GetWindowTextA
GetDC
LoadCursorA
BlockInput
AppendMenuA
IsMenu
DrawTextW
IsWindow
CalcMenuBar
CopyImage
DialogBoxParamW
AlignRects
DrawIconEx
InsertMenuA
DialogBoxParamA
CreateIcon
AppendMenuW
DrawTextA
DialogBoxParamA
EndDialog
GetDC
GetWindowTextA
GetCursor
IsWindow
AppendMenuA
DrawIcon
AlignRects
GetFocus
DialogBoxParamW
CopyIcon
DrawTextW
InsertMenuA
GetDC
CreateIcon
AppendMenuW
DrawTextW
AlignRects
GetCursor
GetWindowTextA
CopyImage
CloseWindow
CalcMenuBar
DialogBoxParamW
AppendMenuA
IsWindow
DrawIconEx
DrawTextA
CopyRect
advapi32
RegDeleteValueW
RegLoadKeyW
RegQueryValueA
RegEnumKeyA
RegQueryValueW
RegReplaceKeyW
RegCreateKeyExA
RegEnumValueA
RegOpenKeyW
RegGetKeySecurity
RegDeleteKeyA
RegOpenKeyExW
RegQueryValueExW
RegReplaceKeyA
RegQueryInfoKeyA
RegEnumKeyExW
RegQueryValueExA
RegEnumKeyW
Sections
.itext Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 177KB - Virtual size: 493KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ