Static task
static1
Behavioral task
behavioral1
Sample
150a92c575a86f077d5667bf393d3faa_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
150a92c575a86f077d5667bf393d3faa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
150a92c575a86f077d5667bf393d3faa_JaffaCakes118
-
Size
303KB
-
MD5
150a92c575a86f077d5667bf393d3faa
-
SHA1
528ff3d70ddd66c0bdcb79eb223d2aad666537f0
-
SHA256
6e38ae0b7a28b314d254e1259d762d34d0adfb53387cbd04c8eadc27d97731e7
-
SHA512
a613734dd75d6ca3630443516387f0bb0061303fb8d25d812f7489d5656b42ffcff0befd9ea1e9783010e620a814ccf39b4c5007d2698fc3cbcbe035dfddcf60
-
SSDEEP
6144:I6MMYx5EOhcoh//oct0pf1XB9FVTqmCYkk3jmsy6LBAOieSqs:I3bhcoRAct0prFTHpTisHr0q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 150a92c575a86f077d5667bf393d3faa_JaffaCakes118
Files
-
150a92c575a86f077d5667bf393d3faa_JaffaCakes118.dll windows:4 windows x86 arch:x86
a54565fd03aff54df94deececbe2273e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
InflateRect
ShowWindow
GetMenu
FillRect
GetFocus
OemToCharA
SetWindowLongW
DrawEdge
MapVirtualKeyA
CreatePopupMenu
GetCursor
UnregisterClassA
SetClipboardData
GetDlgItem
IsWindowUnicode
EnableMenuItem
IsWindow
SetFocus
GetActiveWindow
CloseClipboard
InsertMenuItemA
PostMessageA
GetScrollRange
SendMessageA
GetSystemMetrics
GetKeyboardState
DefFrameProcA
EnableScrollBar
DestroyWindow
SetCursor
MessageBeep
GetCursorPos
ReleaseDC
DrawFrameControl
GetParent
PeekMessageA
GetCapture
GetLastActivePopup
GetDC
GetForegroundWindow
SetTimer
SetWindowTextA
TrackPopupMenu
PtInRect
IsWindowEnabled
GetClassInfoA
GetClipboardData
SetForegroundWindow
GetSubMenu
CharToOemA
IsIconic
GetKeyState
EmptyClipboard
UnhookWindowsHookEx
RemoveMenu
SetClassLongA
TranslateMessage
GetDCEx
DestroyMenu
FindWindowA
GetMessagePos
DefMDIChildProcA
KillTimer
GetKeyboardLayoutList
LoadBitmapA
CreateWindowExA
SetScrollInfo
GetMenuItemID
CharNextA
ScreenToClient
SetScrollRange
gdi32
GetDIBColorTable
CreatePalette
kernel32
GetCommandLineW
VirtualAllocEx
GlobalAlloc
lstrlenA
lstrlenW
LoadLibraryA
GetCommandLineA
ExitProcess
ExitThread
GetACP
GetProcAddress
IsBadReadPtr
GetModuleHandleA
comdlg32
FindTextA
shlwapi
PathIsContentTypeA
SHDeleteValueA
SHQueryInfoKeyA
oleaut32
SafeArrayPtrOfIndex
ole32
CoTaskMemFree
StgCreateDocfileOnILockBytes
CoCreateFreeThreadedMarshaler
CLSIDFromProgID
CoGetContextToken
StgOpenStorage
shell32
Shell_NotifyIconA
SHGetSpecialFolderLocation
advapi32
RegDeleteValueA
RegLoadKeyA
Sections
CODE Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC6 Size: 1024B - Virtual size: 582B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC2 Size: 1KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC8 Size: 1024B - Virtual size: 943B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC5 Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC4 Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 596B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ