Static task
static1
Behavioral task
behavioral1
Sample
265f6edbee875d4c5cc10e0ab3aeb75a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
265f6edbee875d4c5cc10e0ab3aeb75a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
265f6edbee875d4c5cc10e0ab3aeb75a_JaffaCakes118
-
Size
320KB
-
MD5
265f6edbee875d4c5cc10e0ab3aeb75a
-
SHA1
65eac46284d06dc89e4d4d03455ee8e2e1355c33
-
SHA256
bbc2b757cfaf69d0e3253a07f80d02e4c5c6d62b8b66c94643cee189c15b9528
-
SHA512
442919e0090c9e1d690e3646ca1e637b79b60ce4b17885924228bfc0ad442c02a018d968fad0d4c6cd049bec79d86da4b39af11764476c74719c92b732de3cd7
-
SSDEEP
6144:Xq0GoJ+eojnEaKckwprr0EGCO4Wa02eMScc4cl5:a0GoJxQ71gfC/ScNS5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 265f6edbee875d4c5cc10e0ab3aeb75a_JaffaCakes118
Files
-
265f6edbee875d4c5cc10e0ab3aeb75a_JaffaCakes118.dll windows:4 windows x86 arch:x86
f34e947e746141533c6e78fc4a5f8af9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
GetFullPathNameW
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GlobalFlags
WritePrivateProfileStringW
GetFileAttributesW
GetFileTime
HeapAlloc
HeapFree
RtlUnwind
ReadFile
GetCommandLineA
HeapReAlloc
TerminateProcess
SetStdHandle
GetFileType
VirtualProtect
VirtualQuery
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleA
LoadLibraryA
lstrcatW
GetVersionExA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
DeleteFileW
GetModuleFileNameW
GetVersion
CreateFileW
GetVolumeInformationW
FindFirstFileW
FindClose
OutputDebugStringW
WideCharToMultiByte
CreateThread
GetTickCount
GetCurrentThread
SetThreadPriority
lstrcpyW
GetModuleHandleW
GetProcAddress
LoadLibraryW
FreeLibrary
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
DuplicateHandle
lstrcmpW
VirtualFree
GetSystemInfo
WaitForSingleObject
ResetEvent
SetEvent
CreateEventW
CloseHandle
InterlockedDecrement
InterlockedIncrement
lstrcpynW
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
GetModuleFileNameA
GetLastError
lstrlenA
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
Sleep
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
ExitProcess
user32
SetCursor
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
IsWindowEnabled
ShowWindow
SetWindowTextW
IsDlgButtonChecked
CheckDlgButton
EndPaint
BeginPaint
ClientToScreen
DrawTextExW
DrawTextW
TabbedTextOutW
WinHelpW
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextW
GetForegroundWindow
DestroyMenu
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconW
MessageBoxW
IsWindowVisible
UpdateWindow
GetMenu
PostMessageW
GetSysColor
AdjustWindowRectEx
GetParent
GetClassInfoW
RegisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
CopyRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSysColorBrush
DispatchMessageW
CharUpperW
GetMessageW
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
GetLastActivePopup
RegisterWindowMessageW
wvsprintfW
PeekMessageW
wsprintfW
UnregisterClassW
GetKeyState
ReleaseCapture
LoadCursorW
EnableWindow
SetForegroundWindow
GetDesktopWindow
SetCapture
GetCapture
ReleaseDC
GetDC
MapWindowPoints
GetClientRect
GetWindowRect
SendMessageW
InflateRect
SetRect
PtInRect
GrayStringW
GetDeviceCaps
GetTextExtentPoint32W
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontW
CreatePen
GetClipBox
ord17
ord2
ord12
ord8
ord9
ord4
ord6
Sections
.text Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ