Static task
static1
Behavioral task
behavioral1
Sample
0efd91c3b2d10d9b11f669ac929f5252_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0efd91c3b2d10d9b11f669ac929f5252_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0efd91c3b2d10d9b11f669ac929f5252_JaffaCakes118
-
Size
291KB
-
MD5
0efd91c3b2d10d9b11f669ac929f5252
-
SHA1
56331cf2ff8226300f37864b44e86a53c46a5081
-
SHA256
e55ab311c32e60bd8cc933072b38e99c4535838991cbad481dd8d8ef400152b8
-
SHA512
888968f7229d34bfb5f8e9bddb5bd56f06bd73bc0ba60e188ac6c17d56d2c155919c14b2a1515f374fbaa8c13975be5226ce6feaeba96f58618dfea9d853d448
-
SSDEEP
6144:GA1wTB+aXRAiNsZDXdBqEc4gga0NeYhNuOncD6v5xIQrS31:ql+aBANZDXdBm4VakuOcD6hxIR3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0efd91c3b2d10d9b11f669ac929f5252_JaffaCakes118
Files
-
0efd91c3b2d10d9b11f669ac929f5252_JaffaCakes118.dll windows:4 windows x86 arch:x86
2b1b6a6c6abe13797b66007cb4f5d8e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleW
LoadLibraryA
GetCommandLineA
GetModuleHandleA
lstrlenW
ExitThread
GetProcAddress
lstrlenA
IsBadReadPtr
ExitProcess
GetVersionExA
VirtualAlloc
GlobalAlloc
gdi32
GetPaletteEntries
GetObjectA
CreateBitmap
GetBitmapBits
GetCurrentPositionEx
GetPixel
GetDIBits
SelectObject
GetDCOrgEx
comctl32
ImageList_Destroy
ImageList_Draw
ImageList_Create
ImageList_Remove
user32
GetWindowLongA
RegisterWindowMessageA
MessageBoxA
GetDlgItem
GetMenu
MsgWaitForMultipleObjects
SetWindowsHookExA
EnableWindow
GetLastActivePopup
IsChild
RedrawWindow
DispatchMessageA
EmptyClipboard
CallWindowProcA
GetCapture
IsZoomed
CharNextA
IsDialogMessageW
RegisterClipboardFormatA
IsDialogMessageA
ShowScrollBar
DrawIcon
GetDesktopWindow
DrawIconEx
GetForegroundWindow
OemToCharA
ShowOwnedPopups
DefFrameProcA
InvalidateRect
ClientToScreen
GetCursorPos
GetSysColor
GetSysColorBrush
GetDC
GetTopWindow
SetRect
PeekMessageW
BeginPaint
CloseClipboard
GetSystemMetrics
CreateWindowExA
GetMenuState
GetMenuItemInfoA
ReleaseDC
SetWindowLongA
RemoveMenu
IsWindowEnabled
GetWindowDC
GetWindowThreadProcessId
GetKeyboardState
SetMenu
GetWindowPlacement
ShowWindow
EnableMenuItem
CharLowerBuffA
GetMenuStringA
SetParent
DefWindowProcA
IsWindowUnicode
InsertMenuItemA
RemovePropA
GetCursor
CheckMenuItem
OpenClipboard
WaitMessage
SetClipboardData
CharUpperBuffA
DrawAnimatedRects
GetKeyState
GetScrollPos
GetKeyNameTextA
GetClassInfoA
version
GetFileVersionInfoA
VerQueryValueA
Sections
CODE Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc5 Size: 1024B - Virtual size: 686B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc9 Size: 1KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc4 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ