Static task
static1
Behavioral task
behavioral1
Sample
155ffbe8c4eb69a812f8fe8c802df000_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
155ffbe8c4eb69a812f8fe8c802df000_JaffaCakes118
-
Size
150KB
-
MD5
155ffbe8c4eb69a812f8fe8c802df000
-
SHA1
565c6d14c864f473f36c8c84163085365af2185a
-
SHA256
b86f9d5ceac82a5fdf0ff0bdd27bf2de417660f8b26badb435713f45ba3d4c11
-
SHA512
1687d7ef8ef82810abc8b72bca55435da633191cf0bcbce0dcb593b46e8f3f4c2f7d3f777496c19bbdc900820b55e15509072141a5dd03420f0cefaabbbd113b
-
SSDEEP
3072:nvGbdLJd8OXdguaXft67CNI3pvVHqSoZVy3JsE8fIr48suj3:Q1Xuualgd/ABfM4Pu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 155ffbe8c4eb69a812f8fe8c802df000_JaffaCakes118
Files
-
155ffbe8c4eb69a812f8fe8c802df000_JaffaCakes118.dll windows:4 windows x86 arch:x86
413b2391492bc2bdddeafcdf22a8009c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapDestroy
FileTimeToLocalFileTime
ReadFile
GetProcessHeaps
lstrcatA
FindNextFileW
CreateMutexW
FindNextChangeNotification
LCMapStringW
FindResourceW
FormatMessageW
GlobalSize
CreateDirectoryW
SystemTimeToFileTime
GetStartupInfoA
lstrcatW
HeapCreate
GetDateFormatA
lstrcmpiA
InterlockedIncrement
lstrcmpA
GetFullPathNameA
FindFirstFileW
SleepEx
LoadLibraryA
FindCloseChangeNotification
GetLocaleInfoA
TerminateThread
TlsAlloc
RemoveVectoredExceptionHandler
GetLastError
AddVectoredExceptionHandler
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoW
CloseHandle
CreateFileA
Sleep
LCMapStringA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
lstrcmpiW
RtlUnwind
GetModuleHandleW
InitializeCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetOEMCP
GetACP
SetLastError
TlsFree
TlsSetValue
TlsGetValue
ExitProcess
GetModuleHandleA
GetCPInfo
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
OutputDebugStringA
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
HeapReAlloc
VirtualAlloc
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetVersionExA
GetCommandLineA
HeapFree
GetFileSize
CreateFileMappingW
GetFileAttributesW
lstrcpynA
GetModuleFileNameA
GetCommandLineW
InterlockedDecrement
GlobalFree
FileTimeToSystemTime
DuplicateHandle
GetProcAddress
SetThreadPriority
GetEnvironmentVariableW
GetShortPathNameW
LoadResource
SystemTimeToTzSpecificLocalTime
MapViewOfFile
GetEnvironmentVariableA
WriteFile
CreateFileW
GetTimeFormatW
GetCurrentThreadId
CreateEventW
GlobalAlloc
GetCurrentProcess
lstrcpyW
GetCurrentProcessId
IsBadStringPtrA
lstrlenA
SetStdHandle
WaitForSingleObject
user32
EnableWindow
DeleteMenu
GetDC
SetCursor
TrackPopupMenu
CreateDialogIndirectParamW
MessageBoxW
ChildWindowFromPoint
SetWindowsHookExW
ScreenToClient
SetScrollPos
FindWindowExW
ShowScrollBar
GetSysColorBrush
DefWindowProcW
OpenClipboard
DrawMenuBar
DrawTextW
DispatchMessageW
CallNextHookEx
IsWindowEnabled
GetIconInfo
CheckMenuItem
SetMenuDefaultItem
MapWindowPoints
EmptyClipboard
CreateMenu
SetFocus
BeginPaint
GetSysColor
SetScrollInfo
GetWindowLongW
OffsetRect
GetMenuItemCount
GetScrollPos
DrawFocusRect
GetSystemMetrics
GetForegroundWindow
CreatePopupMenu
LookupIconIdFromDirectoryEx
EndPaint
RegisterClassW
ReleaseCapture
SetClipboardData
GetWindowRect
RedrawWindow
GetFocus
RegisterWindowMessageW
CharUpperW
GetClassLongW
CopyIcon
SetWindowPlacement
DeferWindowPos
SetParent
DrawStateW
GetMenuStringW
GetMenuItemInfoW
DrawIconEx
RegisterClassExW
GetWindowTextA
EqualRect
InsertMenuItemW
FillRect
CreateDialogParamW
GetAsyncKeyState
GetDlgItemTextA
GetDoubleClickTime
IsDialogMessageW
InflateRect
DestroyWindow
MapVirtualKeyW
CloseClipboard
GetDesktopWindow
CreateWindowExW
GetDlgCtrlID
IsRectEmpty
ScrollWindow
CharNextExA
GetWindowThreadProcessId
GetWindow
SystemParametersInfoW
SetDlgItemTextW
CallWindowProcW
InvalidateRgn
EndDialog
IntersectRect
PostQuitMessage
TranslateMessage
SendMessageW
LoadImageW
SendMessageA
SetDlgItemTextA
SetWindowTextW
CheckDlgButton
IsZoomed
GetShellWindow
GetParent
WindowFromPoint
MessageBeep
gdi32
CreateDIBSection
CreateFontIndirectW
OffsetRgn
CreateCompatibleDC
CombineRgn
RealizePalette
GetTextMetricsW
GetTextExtentPoint32A
CreatePen
GetTextExtentPoint32W
GetStockObject
CreateDIBitmap
GetDeviceCaps
SelectClipRgn
CreateHatchBrush
comdlg32
ChooseFontW
advapi32
IsTextUnicode
RegQueryValueExA
RegOpenKeyExA
GetUserNameW
shell32
SHGetDesktopFolder
SHAppBarMessage
ExtractIconW
SHGetPathFromIDListW
Shell_NotifyIconW
ole32
CoCreateInstance
RegisterDragDrop
CoTaskMemFree
OleInitialize
OleUninitialize
version
GetFileVersionInfoSizeW
ws2_32
select
WSAStartup
ioctlsocket
comctl32
ImageList_EndDrag
ImageList_Remove
ImageList_GetIcon
ImageList_Create
ImageList_DragMove
ImageList_DragEnter
InitCommonControlsEx
ImageList_Add
ImageList_Draw
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ