Static task
static1
Behavioral task
behavioral1
Sample
0fccd44e90d6c350d0cc3f3b630511a2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0fccd44e90d6c350d0cc3f3b630511a2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0fccd44e90d6c350d0cc3f3b630511a2_JaffaCakes118
-
Size
225KB
-
MD5
0fccd44e90d6c350d0cc3f3b630511a2
-
SHA1
34ba7bb6ac28117ad6263837658b2376881be1b9
-
SHA256
e49115089af75f4b9f088685806834c4e4ee284e331e8061ab029550da734fe6
-
SHA512
3d411eb0aab7e3178a7e98b9b9102ef52d704677f685d7cf4207c2b92fb663a6cbe4e3a8b0087e0776492b5ff5b27979447c7cf9136c35d9ac016257bd178b0c
-
SSDEEP
6144:QuX6ZDSblo38tdGmv0OMIgRLxQMgnsn5XD:QuXi38G9Od0LHgkz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fccd44e90d6c350d0cc3f3b630511a2_JaffaCakes118
Files
-
0fccd44e90d6c350d0cc3f3b630511a2_JaffaCakes118.dll windows:4 windows x86 arch:x86
58315adfa5a0f41ed28c91a64bf70d57
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteFileW
GetCurrentThreadId
GetFileTime
GetLastError
GetCommandLineA
GetUserDefaultLangID
CreateThread
FindAtomA
CopyFileW
GetCPInfo
ExitProcess
GetCurrentProcessId
Sleep
DeleteFileA
GetComputerNameA
GetUserDefaultLangID
ExitProcess
GetCurrentProcess
GetCPInfo
GetComputerNameA
GetLastError
CreateThread
GetFileTime
GetCurrentThreadId
ExitThread
GetStdHandle
GetCurrentProcessId
DeleteFileA
GetOEMCP
DeleteAtom
GetConsoleOutputCP
FindFirstFileA
FindAtomA
GetCommandLineA
DeleteFileA
GetCurrentProcess
ExitProcess
GetConsoleOutputCP
OpenFile
GetCurrentThread
DeleteAtom
CreateDirectoryA
GetLastError
CreateDirectoryA
CreateProcessA
DeleteFileW
FindAtomA
GetCommandLineA
GetFileTime
GetCurrentProcessId
Sleep
GetConsoleOutputCP
GetCurrentThreadId
GetCPInfo
DeleteFileA
GetCurrentProcess
GetComputerNameA
ExitThread
GetCurrentThread
CopyFileW
GetFileTime
ExitProcess
GetCurrentThreadId
GetOEMCP
Sleep
GetCurrentThread
CreateThread
DeleteFileA
ExitThread
GetConsoleOutputCP
DeleteAtom
GlobalFree
GetComputerNameA
CreateProcessA
GetCurrentProcess
DeleteFileW
advapi32
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegOpenKeyW
RegEnumValueA
RegQueryValueA
RegEnumKeyExA
RegCreateKeyExW
RegCreateKeyExA
RegQueryValueExA
RegQueryValueW
RegReplaceKeyW
RegReplaceKeyA
RegLoadKeyA
RegEnumKeyW
RegEnumKeyExW
RegOpenKeyExW
RegGetKeySecurity
RegDeleteValueW
RegDeleteValueA
RegCreateKeyExA
RegLoadKeyA
RegOpenKeyA
RegCreateKeyW
RegEnumValueW
RegQueryValueExW
RegDeleteKeyA
RegEnumKeyW
RegOpenKeyExA
RegQueryInfoKeyA
RegReplaceKeyA
RegOpenKeyW
RegDeleteKeyW
RegQueryInfoKeyW
RegReplaceKeyW
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegQueryValueExW
RegQueryValueA
RegOpenKeyA
RegOpenKeyExA
RegEnumKeyExA
RegLoadKeyA
RegGetKeySecurity
RegLoadKeyW
RegFlushKey
RegEnumKeyW
RegCreateKeyW
RegOpenKeyA
RegDeleteValueW
RegQueryInfoKeyA
RegReplaceKeyA
RegGetKeySecurity
RegLoadKeyW
RegQueryValueW
RegOpenKeyExW
RegDeleteKeyA
RegQueryInfoKeyW
user32
CopyIcon
AppendMenuW
LoadMenuA
GetWindowTextLengthA
DrawTextW
GetDC
DialogBoxParamA
GetDlgItem
DialogBoxParamW
GetFocus
IsMenu
EndDialog
CreateIcon
DrawIconEx
GetCursor
AppendMenuW
CopyRect
LoadMenuA
CreateIcon
DialogBoxParamW
LoadCursorA
GetFocus
GetMenu
GetWindowTextLengthA
CalcMenuBar
DrawIcon
CopyImage
EndDialog
DrawTextW
CopyIcon
DialogBoxParamA
GetCursor
Sections
.itext Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 179KB - Virtual size: 559KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ