Static task
static1
Behavioral task
behavioral1
Sample
12b6204b474b18ae248de7c314138e40_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
12b6204b474b18ae248de7c314138e40_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
12b6204b474b18ae248de7c314138e40_JaffaCakes118
-
Size
249KB
-
MD5
12b6204b474b18ae248de7c314138e40
-
SHA1
eac39ddeaf0edb0081fd8abcb0b14f222f19bab1
-
SHA256
4c1206801b0229fc90296d0cd13e94343f93930513b1bfb08b216e0e46cc83d2
-
SHA512
ce467225b95e292fc23321f0cda09c28e3b47f90cf8fc7dae78336c139c5fd6cbf218cf67dbcb73e38554300aff3fae1f4644c37d982858eaad0a0eb562c785b
-
SSDEEP
6144:ImmmMR39dY5BBAVT56XY7PScezLXTpaQGmmmcmmm9mmmommmi55:UNdYzBET8XeSNzZaG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12b6204b474b18ae248de7c314138e40_JaffaCakes118
Files
-
12b6204b474b18ae248de7c314138e40_JaffaCakes118.dll windows:5 windows x86 arch:x86
8b0554ae0fdb03f19ea283a53d049f02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetFileSize
GetLastError
GetLocalTime
GetLocaleInfoA
GetSystemTime
GetTickCount
QueryPerformanceCounter
ReleaseMutex
SetEndOfFile
SetFilePointer
GetDiskFreeSpaceA
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WriteFile
lstrcmpA
lstrcmpiA
lstrlenA
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateMutexA
CreateFileA
CreateDirectoryA
CloseHandle
CreateFileW
VirtualAlloc
SystemTimeToFileTime
user32
IsDlgButtonChecked
LoadStringA
MessageBoxA
OffsetRect
PeekMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetWindowPos
ShowWindow
IsDialogMessageA
TranslateMessage
GetDlgItem
GetDesktopWindow
DispatchMessageA
DialogBoxParamA
DestroyWindow
CreateDialogParamA
CheckDlgButton
CharPrevA
LoadCursorA
LoadIconA
GetWindowRect
SystemParametersInfoA
GetParent
EndDialog
advapi32
RegOpenKeyA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegOverridePredefKey
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
ole32
CoTaskMemRealloc
CoInitialize
CoGetMalloc
CoCreateInstance
CoUninitialize
shlwapi
StrFormatByteSize64A
wnsprintfA
comctl32
InitCommonControlsEx
Sections
FFF Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ