Static task
static1
Behavioral task
behavioral1
Sample
0fb659cf6f0ba8ee37814ed0d1b5d57f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0fb659cf6f0ba8ee37814ed0d1b5d57f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0fb659cf6f0ba8ee37814ed0d1b5d57f_JaffaCakes118
-
Size
176KB
-
MD5
0fb659cf6f0ba8ee37814ed0d1b5d57f
-
SHA1
222779b4940de3d8d37bdb997999407438f7dc8a
-
SHA256
f85b9c7f2980ebc74ff7edac86d1c7286e9bacec0f84004829b14d1b3d667ee7
-
SHA512
9c64f7113a528529a53f3a43c063b0b23bdff6653b5ac9684980b3383560a7038483af0b0078312c3d68134f51dccbee3ddea2a2d1d7c40cf61eabe759a5ef3a
-
SSDEEP
3072:gQC9kC+HR3FCdmBc1yyoSY6RI2nuwGMovZ0a1n8DOniMqqDLy/lnqR8b:akdemB4yzSZXRGJ0jDOhqqDLul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb659cf6f0ba8ee37814ed0d1b5d57f_JaffaCakes118
Files
-
0fb659cf6f0ba8ee37814ed0d1b5d57f_JaffaCakes118.dll windows:4 windows x86 arch:x86
797c97358bebfeebd9cc6d3a51fdfb61
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
ReleaseMutex
InterlockedExchangeAdd
ReleaseSemaphore
GlobalFree
GlobalAlloc
CreateMutexW
CreateFileMappingW
GetSystemDefaultLangID
UnmapViewOfFile
MapViewOfFile
WideCharToMultiByte
GetProcAddress
OutputDebugStringA
LocalFree
GetSystemDefaultLCID
IsBadReadPtr
GetStringTypeW
InterlockedCompareExchange
LCMapStringW
LCMapStringA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
HeapAlloc
IsBadCodePtr
IsBadWritePtr
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
InterlockedExchange
FormatMessageW
GetCommandLineA
SwitchToThread
GetModuleHandleW
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
Sleep
ResetEvent
CloseHandle
WaitForSingleObject
SetEvent
VirtualProtect
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
HeapFree
VirtualFree
HeapCreate
HeapDestroy
RtlUnwind
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
user32
LoadStringW
SendMessageW
DialogBoxParamW
SetWindowLongW
EndDialog
GetWindowLongW
SendDlgItemMessageW
LoadBitmapW
WinHelpW
EnableWindow
ShowWindow
GetFocus
MessageBoxW
GetDlgItem
GetDlgItemTextW
SetDlgItemTextW
SetWindowTextW
GetParent
wsprintfW
MessageBeep
advapi32
CryptAcquireContextW
CryptReleaseContext
RegCreateKeyExW
RegSetValueExW
GetLengthSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptGenRandom
InitializeSecurityDescriptor
gdi32
DeleteObject
ole32
CoCreateInstance
CLSIDFromProgID
CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemAlloc
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ