__EnumPropsW@12
Static task
static1
Behavioral task
behavioral1
Sample
0ec712cef0842a337704533003d18d27_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0ec712cef0842a337704533003d18d27_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0ec712cef0842a337704533003d18d27_JaffaCakes118
-
Size
148KB
-
MD5
0ec712cef0842a337704533003d18d27
-
SHA1
e216f10da43c9f3758bd75897ae77f1ab0460418
-
SHA256
d81dbcd5ce0c4129141b2c979e050704a0ba9a25bad2e7f3c6edb42ad980aa21
-
SHA512
2cc9bb1653f9f9a881dd78ce429c6fb45142397e6403ccde4fa835de47d4e18cd6ab050f2c289d69df93733b9107a7825e21fa2eaf367eb9cc1ec2eca265b7a7
-
SSDEEP
3072:ye5SD1oEAjuvXMQAbLAoWmX/35V6Nxj/gOPZ4wCyUwITX2N+f:ipLMQAnvLfiZzCH2N+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec712cef0842a337704533003d18d27_JaffaCakes118
Files
-
0ec712cef0842a337704533003d18d27_JaffaCakes118.dll windows:5 windows x86 arch:x86
eccaaf5f8e66db9770a995a74f4f2c63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
StrIsIntlEqualW
StrCatBuffW
PathUndecorateA
StrFormatKBSizeW
PathCombineW
shell32
ord716
kernel32
GetVersionExW
SetMessageWaitingIndicator
GetStartupInfoW
GetCommMask
UnlockFile
CloseHandle
TlsFree
DeleteTimerQueueEx
FileTimeToDosDateTime
BackupRead
LoadLibraryExW
CreateFiber
GetFullPathNameW
SetNamedPipeHandleState
CreateSemaphoreW
lstrcpynW
GetLogicalDriveStringsW
CreateMutexW
WriteProfileStringA
user32
WaitForInputIdle
TranslateAcceleratorW
EnumThreadWindows
CheckMenuItem
ChangeDisplaySettingsA
ScrollWindowEx
ReleaseCapture
WindowFromDC
LoadBitmapW
IsCharLowerW
CheckDlgButton
EndDialog
GetWindowPlacement
GetDC
CreateIconIndirect
GetMenuCheckMarkDimensions
DrawTextExW
IsWindowEnabled
GetClipCursor
SetMenuItemBitmaps
DlgDirListComboBoxW
wsprintfA
GetTabbedTextExtentW
SendMessageA
SetSysColors
DrawStateA
IntersectRect
LoadMenuW
PeekMessageW
GetRawInputDeviceInfoA
RedrawWindow
SetMenuContextHelpId
ClipCursor
DispatchMessageA
HiliteMenuItem
SetCaretPos
GetPropW
GetMessagePos
ToUnicodeEx
GetLastActivePopup
GetWindowTextLengthA
gdi32
GetPixel
SetPixelV
GetCurrentPositionEx
CreateBrushIndirect
CloseFigure
AddFontResourceExA
GetCharWidthFloatA
GetTextExtentPoint32A
BitBlt
GetEnhMetaFileW
RemoveFontResourceW
PolyTextOutW
SetBitmapDimensionEx
SetTextAlign
advapi32
FindFirstFreeAce
AreAnyAccessesGranted
AddAccessAllowedAce
CloseEventLog
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat_0 Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmem Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedat Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 938B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ