GetMaximumZoomPos
Static task
static1
Behavioral task
behavioral1
Sample
18530757771c4d782843b3f454feee68_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
18530757771c4d782843b3f454feee68_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
18530757771c4d782843b3f454feee68_JaffaCakes118
-
Size
224KB
-
MD5
18530757771c4d782843b3f454feee68
-
SHA1
77acc79e076fab9a90d4f67562bad66606e308c4
-
SHA256
aee2d36a3e7160424d2ae65c459255ae37045df63be12c419c4770a8a456b022
-
SHA512
92c20a2d0b25f0760db2e7f25ace2d31a1dd8a2ac223c5e0545247c52c6f0c0fa740f4da321dec0381f3fb0ffccf1eadd835492adb32c29b4a958d8b0db3a8ff
-
SSDEEP
6144:MsUhcSDIvXgZA7qHPPKS1KzTxbWzHxjH:PUSSEvX0A7qvPMTxbW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18530757771c4d782843b3f454feee68_JaffaCakes118
Files
-
18530757771c4d782843b3f454feee68_JaffaCakes118.dll windows:4 windows x86 arch:x86
e4413cfbe420f13dafc69efb777a6990
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
EnterCriticalSection
ExitProcess
ExitThread
FatalAppExitA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCommandLineA
GetCommandLineW
GetCurrentProcess
GetModuleHandleA
GetNumberFormatA
GetVersionExA
HeapAlloc
HeapCreate
InitializeCriticalSection
IsDebuggerPresent
IsValidCodePage
LCMapStringW
LoadLibraryA
OpenEventA
RtlUnwind
SetErrorMode
SetHandleCount
SetProcessWorkingSetSize
SizeofResource
Sleep
TerminateProcess
TlsFree
VirtualFree
WaitForSingleObject
WriteConsoleA
lstrcpyA
lstrlenW
advapi32
ClearEventLogW
CreateWellKnownSid
CryptExportKey
CryptGetHashParam
EnumDependentServicesA
GetAccessPermissionsForObjectW
GetSecurityDescriptorSacl
LsaDeleteTrustedDomain
MakeAbsoluteSD
QueryServiceLockStatusA
RegOpenKeyA
RemoveUsersFromEncryptedFile
SetTraceCallback
user32
GetWindowRect
GetWindowTextA
LoadCursorA
ModifyMenuA
GetDlgCtrlID
SetCursor
SetFocus
SetForegroundWindow
GetCapture
FindWindowExA
FindWindowA
EmptyClipboard
CreateWindowExA
DispatchMessageA
ClientToScreen
RemoveMenu
wsprintfA
ole32
CoMarshalInterface
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CoBuildVersion
IsEqualGUID
ddraw
DSoundHelp
DirectDrawCreateEx
Exports
Exports
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ