Static task
static1
Behavioral task
behavioral1
Sample
14acd8adaee3e7dab8344e0d6d250c6b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14acd8adaee3e7dab8344e0d6d250c6b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
14acd8adaee3e7dab8344e0d6d250c6b_JaffaCakes118
-
Size
136KB
-
MD5
14acd8adaee3e7dab8344e0d6d250c6b
-
SHA1
5cdc9155acbf5a7802e5f31a3f3e567ad06c3760
-
SHA256
8633f065a11bebf8af4ad520d27f34fa7a432292e1886d6ca3fa3407ea13d255
-
SHA512
5d50b4640439c97e869bc80e14827c0b50a43758b57e72435db7712994116ea190b58cbd3b7cef7a21f3da4371c6ad4f1f7d861da6d2731e487475960d189bf0
-
SSDEEP
3072:PIuViIJVy2P+ixphcrVuS93WoLn9AvwCyg/9zz3:3zbtjcQS9Gox9Cyg/9z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14acd8adaee3e7dab8344e0d6d250c6b_JaffaCakes118
Files
-
14acd8adaee3e7dab8344e0d6d250c6b_JaffaCakes118.dll windows:4 windows x86 arch:x86
dcc54af39514cde2920ec8edae4dbb61
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
DisableThreadLibraryCalls
GetVersionExA
GlobalAlloc
LocalFileTimeToFileTime
FormatMessageW
FormatMessageA
GetSystemTimeAsFileTime
CreateEventW
GetTickCount
GlobalFree
FindNextFileW
GlobalLock
GlobalUnlock
CreateThread
DeleteFileW
CreateFileW
SetFileTime
CloseHandle
GetCurrentThreadId
FindFirstFileW
FindClose
lstrcmpiA
lstrcmpA
lstrcpynW
LocalFree
GetProcAddress
lstrlenA
FreeLibrary
lstrcpynA
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
SystemTimeToFileTime
GetFullPathNameW
FreeResource
ReleaseMutex
GetSystemDirectoryW
WriteFile
LCMapStringW
GetProcessHeap
HeapReAlloc
SetLastError
WideCharToMultiByte
IsBadReadPtr
GetFileTime
lstrcpyW
lstrcatW
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
GetCommandLineA
VirtualProtect
VirtualFree
CompareFileTime
VirtualAlloc
user32
GetClipboardFormatNameW
CharNextW
GetWindowTextW
SendMessageW
ShowWindow
SetWindowTextW
EnableWindow
LoadStringW
MessageBoxW
UpdateWindow
GetClientRect
LoadStringA
SetCursor
GetDlgItem
CharNextA
InflateRect
advapi32
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegDeleteKeyW
RegSetValueExA
RevertToSelf
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
FreeSid
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
ole32
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
ReleaseStgMedium
CreateStreamOnHGlobal
GetHGlobalFromStream
StringFromCLSID
CLSIDFromString
msvcr71
wcschr
wcsncpy
sscanf
_vsnwprintf
wcslen
wcscpy
_wcsicmp
_wtoi64
__CxxFrameHandler
realloc
memcpy
_initterm
__CppXcptFilter
_onexit
__dllonexit
_wtol
wcstok
wcstoul
wcscmp
time
localtime
asctime
fprintf
vfprintf
strrchr
_CxxThrowException
malloc
_except_handler3
_adjust_fdiv
_amsg_exit
free
_XcptFilter
memset
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ