Static task
static1
Behavioral task
behavioral1
Sample
16bcd865276d2fb0fee4b02fe1e70979_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16bcd865276d2fb0fee4b02fe1e70979_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
16bcd865276d2fb0fee4b02fe1e70979_JaffaCakes118
-
Size
204KB
-
MD5
16bcd865276d2fb0fee4b02fe1e70979
-
SHA1
dc492f67bd3a06c975251019629cfe5038aaf17a
-
SHA256
b21ff7621a409b6c6f0bd1b691d936d46e6be76b75dd68e2c0089e337d659ed8
-
SHA512
09efdda76933c11886da2b62d0c392b6f568d1be889cdb10ffcef8223c6dd9c04a1b4e7c5bde560aab693867872f0dfee8de7a03707506e46f0f59742753d631
-
SSDEEP
3072:soMLIiA4DFL4Q1aHeijsC17PBuXvEEKDEgRxUMvbu2VEbSgo/bfTxt:soMk+Fj1an117DET8buiEbSgIbfT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16bcd865276d2fb0fee4b02fe1e70979_JaffaCakes118
Files
-
16bcd865276d2fb0fee4b02fe1e70979_JaffaCakes118.dll windows:4 windows x86 arch:x86
a0011d316afb30c8980287eda000e7c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
ole32
GetHGlobalFromStream
ReleaseStgMedium
StringFromGUID2
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemFree
CoTaskMemAlloc
CoSetProxyBlanket
CoCreateInstanceEx
shell32
ShellExecuteW
ShellExecuteExW
kernel32
lstrlenW
lstrcpyW
lstrcmpiW
WriteFile
WideCharToMultiByte
CloseHandle
CreateFileW
DeleteCriticalSection
DisableThreadLibraryCalls
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageW
GetComputerNameW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
LocalReAlloc
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
user32
wsprintfW
WinHelpW
DialogBoxParamW
EnableWindow
EndDialog
GetDC
GetDlgItem
GetDlgItemTextA
GetParent
GetWindowLongW
InsertMenuItemW
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadStringW
MessageBoxW
PostMessageW
RegisterClipboardFormatW
ReleaseDC
SendDlgItemMessageW
SendMessageW
SetCursor
SetDlgItemTextW
SetFocus
SetWindowLongW
SetWindowTextW
SystemParametersInfoW
comctl32
PropertySheetW
CreatePropertySheetPageW
crypt32
CertGetEnhancedKeyUsage
CryptQueryObject
CryptFindOIDInfo
CryptEnumOIDInfo
CryptEncodeObject
CryptDecodeObject
CertAddCertificateContextToStore
CertCloseStore
CertControlStore
CertDeleteCertificateFromStore
CertDuplicateCertificateContext
CertDuplicateStore
CertEnumCertificatesInStore
CertEnumSystemStore
CertFindCRLInStore
CertFreeCRLContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertSaveStore
CertGetNameStringW
CertOpenStore
gdi32
CreateFontIndirectW
DeleteObject
GetDeviceCaps
rpcrt4
UuidCreate
UuidToStringW
RpcStringFreeW
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ