Static task
static1
Behavioral task
behavioral1
Sample
1192aa124e8fc3d9308320cb51d4d82f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1192aa124e8fc3d9308320cb51d4d82f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
1192aa124e8fc3d9308320cb51d4d82f_JaffaCakes118
-
Size
208KB
-
MD5
1192aa124e8fc3d9308320cb51d4d82f
-
SHA1
c156693c9b40346817dbc30cc14a89f90027694e
-
SHA256
04c2986cc67898ffc690b7faeb9b996d64d4abf2f8f1b6ac063dec9cdb6cd99e
-
SHA512
567933ccb3fbb166d1e77d477f104dc6af939b9b06d421ef22e0d8ef7e25657d7d6cd67873be435590cbda1ee46a36fdc40aac72a7188dad73a6c248f4e5cd66
-
SSDEEP
3072:aPHrZA+IG1ZinRvXRVxbnEgZccVKmqtwaIi6NIh+B:a/eE4JnxrVccEmHaBNh+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1192aa124e8fc3d9308320cb51d4d82f_JaffaCakes118
Files
-
1192aa124e8fc3d9308320cb51d4d82f_JaffaCakes118.dll windows:5 windows x86 arch:x86
5566fb1f6405a2b6cf03eae8e827918e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
lstrcatW
VirtualAllocEx
GetWindowsDirectoryW
user32
BeginPaint
UpdateWindow
ScrollWindow
SetScrollPos
SetScrollRange
ReleaseDC
GetDC
AppendMenuA
CallMsgFilterW
CascadeWindows
ChangeDisplaySettingsW
CharToOemA
CheckMenuItem
CloseDesktop
CopyAcceleratorTableA
CopyRect
CreateIconFromResourceEx
CreateMDIWindowA
DdeClientTransaction
DdeCreateStringHandleW
DdeFreeStringHandle
DdePostAdvise
DdeSetQualityOfService
DeregisterShellHookWindow
DrawStateW
EndDialog
EndMenu
EnumChildWindows
GetAltTabInfo
GetClassLongW
GetClipboardOwner
GetComboBoxInfo
GetInputState
EndPaint
GetMessageA
GetScrollPos
GetScrollRange
GetSubMenu
GetUpdateRect
GetWindowRgn
GetWindowThreadProcessId
IMPQueryIMEA
InSendMessageEx
InsertMenuItemA
IsCharUpperW
IsDialogMessageA
LoadKeyboardLayoutW
LockWorkStation
MoveWindow
OemToCharBuffW
RegisterClassExA
RegisterDeviceNotificationW
RemoveMenu
ScrollDC
SendDlgItemMessageA
SendMessageW
SendNotifyMessageW
SetDlgItemTextW
SetWindowWord
SystemParametersInfoW
TabbedTextOutA
TileWindows
ToAscii
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
VkKeyScanA
VkKeyScanExA
WaitForInputIdle
WindowFromDC
PostQuitMessage
DefWindowProcA
LoadIconA
CreateWindowExA
GetKeyboardLayout
gdi32
TextOutA
GetTextMetricsA
advapi32
RegOpenKeyExA
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ