hYEFwruhE
Static task
static1
Behavioral task
behavioral1
Sample
14622647c34eee873a49c8de73c34d26_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
14622647c34eee873a49c8de73c34d26_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
14622647c34eee873a49c8de73c34d26_JaffaCakes118
-
Size
136KB
-
MD5
14622647c34eee873a49c8de73c34d26
-
SHA1
e923e0fbbc870a0aaf466feace5b7ae1d7948215
-
SHA256
9f618e8778942f162e350965d51d205e9abbe14d215ddf06d1082eba3d76e970
-
SHA512
d763b9443328733007710cfe1bacc4e2203fc53adaceda0a5d4468efd80aee06d7006903bce862a9641a0e94cd87ab30f786a63ef4ffd310eb5941eb8d36d3b8
-
SSDEEP
1536:ymKV0AXsoydXmSljy4+9BNZ+gSUD8yHxPJsQ/ZBcFgMjp4BeNTr10mo9:jKVP9smgyvXNCKxZBcyMjp9v1p4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14622647c34eee873a49c8de73c34d26_JaffaCakes118
Files
-
14622647c34eee873a49c8de73c34d26_JaffaCakes118.dll windows:4 windows x86 arch:x86
a64ae64ddd3f28f1759e2e2c0119dad3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsDBCSLeadByte
VerSetConditionMask
GetTimeZoneInformation
FormatMessageW
CreateDirectoryA
GetTempPathA
VirtualProtect
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalFree
LocalAlloc
TlsGetValue
TlsSetValue
TlsAlloc
InterlockedExchange
InterlockedIncrement
InterlockedCompareExchange
GetUserDefaultLCID
GetModuleHandleW
GetFileAttributesW
GetVersion
Sleep
UnmapViewOfFile
ReleaseMutex
CreateEventA
LoadLibraryA
FreeLibrary
ExitThread
GetACP
ResetEvent
CloseHandle
GetCurrentThreadId
GetTickCount
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
SetThreadPriority
GetDateFormatA
GetModuleFileNameA
lstrlenA
ReplaceFileA
GetLocaleInfoW
GetLastError
CreateWaitableTimerA
GetLocalTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetModuleHandleA
Beep
user32
SetForegroundWindow
ShowWindow
GetParent
GetDlgItem
EndDialog
GetWindowTextW
SetWindowTextW
CreateDialogParamW
IsDialogMessageA
PtInRect
GetSystemMetrics
SetWindowLongA
GetWindowLongA
EndPaint
SendMessageA
IsZoomed
BeginPaint
GetClientRect
PostQuitMessage
InvalidateRect
GetFocus
EnableWindow
MsgWaitForMultipleObjects
KillTimer
SetFocus
MessageBoxW
LoadCursorA
CharUpperBuffA
IsWindow
GetWindowTextA
GetWindowTextLengthA
LoadImageA
SendMessageW
LoadIconA
MapWindowPoints
SetCursor
SetTimer
GetAsyncKeyState
GetSysColor
MoveWindow
RegisterWindowMessageA
MessageBeep
UnregisterClassA
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItemTextA
PeekMessageA
GetForegroundWindow
LoadStringW
LoadStringA
GetWindowRect
GetDesktopWindow
GetDC
ReleaseDC
SetWindowPos
CharNextA
GetMessageA
TranslateMessage
DispatchMessageA
SystemParametersInfoA
PostMessageA
DestroyWindow
RegisterClassA
PostThreadMessageA
DialogBoxParamW
DrawFrameControl
gdi32
GetDeviceCaps
GetStockObject
GetTextExtentPoint32A
DeleteObject
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ole32
CoCreateGuid
CreateStreamOnHGlobal
CoFileTimeNow
CoCreateInstance
PropVariantClear
msvcrt
strlen
memset
strcpy
strstr
wcslen
wcscmp
strncmp
malloc
free
strchr
qsort
memmove
wcscpy
mktime
wcsncat
wcsncpy
wcschr
wcsstr
wcscat
localtime
sprintf
rand
time
atoi
printf
comctl32
ImageList_GetIcon
ImageList_Add
ImageList_Write
shlwapi
UrlEscapeA
PathStripPathW
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 418KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ