Static task
static1
Behavioral task
behavioral1
Sample
0f3bd3ec188bf6dacae9f488470fa929_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f3bd3ec188bf6dacae9f488470fa929_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0f3bd3ec188bf6dacae9f488470fa929_JaffaCakes118
-
Size
160KB
-
MD5
0f3bd3ec188bf6dacae9f488470fa929
-
SHA1
96eaaac3d4c2b140c9bb795ade10c10b8c118d86
-
SHA256
d86dff56b1c09cec2197c5065041465cc079377d061cbd15bdaef6f97e3f48f6
-
SHA512
ef4ae40ff4bfff034ba7156fcc1a459024c3008ebffd9d72690af737c7e709cd9676d5fdf28c08c484318716d7504df6c1fe17d20340fb8decdc3a867c597095
-
SSDEEP
3072:ufgioOTRLrpnwpKdevohMqqDLy/A3leb3StwBG3:Xi7pRsqqDLuA3YC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f3bd3ec188bf6dacae9f488470fa929_JaffaCakes118
Files
-
0f3bd3ec188bf6dacae9f488470fa929_JaffaCakes118.dll windows:4 windows x86 arch:x86
d48caa8fcff65331dfa87c12258c8145
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
CloseHandle
SetEvent
LCMapStringW
WaitForSingleObject
GetProcessHeap
lstrlenW
LocalFree
GetVersionExW
lstrcmpW
GetProcAddress
FreeLibrary
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleHandleW
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
RegisterWaitForSingleObject
GetCommandLineW
CreateEventW
LoadLibraryA
GetStringTypeA
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
HeapAlloc
IsBadCodePtr
VirtualProtect
GetWindowsDirectoryW
FormatMessageW
GetCommandLineA
GetCurrentThreadId
IsBadWritePtr
IsBadReadPtr
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW
user32
IsWindow
ChangeDisplaySettingsW
SetDlgItemTextW
SendMessageW
GetDlgItem
LoadIconW
DestroyIcon
MessageBoxW
DialogBoxParamW
GetWindowLongW
EndDialog
advapi32
RegOpenKeyW
IsValidSecurityDescriptor
GetSecurityDescriptorLength
RegCloseKey
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ