Static task
static1
Behavioral task
behavioral1
Sample
268bfd9d1d6403629f807a7a01fd42c0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
268bfd9d1d6403629f807a7a01fd42c0_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
268bfd9d1d6403629f807a7a01fd42c0_JaffaCakes118
-
Size
80KB
-
MD5
268bfd9d1d6403629f807a7a01fd42c0
-
SHA1
057aa36721aada667b7f23b4c1386184070a2833
-
SHA256
daa84885dcdbd1bc7d39135caf977b7c09d7798d29f39d6d276cfc635ddd616e
-
SHA512
cd971a7a066b97fd6d9d29465aff4af158d793bd0c9e13451d0996b22088c203128c315884403e129200515f96e2f20f4f02fdf3d666587e6a2401a022622c4b
-
SSDEEP
1536:WCT/9w6C05XA2XZC70yZyeriC+l9Mk81s0WvM86xwVDrdtzcI4y6Wq://9lfXZy0ibKlykGs0UdtzcI4y61
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 268bfd9d1d6403629f807a7a01fd42c0_JaffaCakes118
Files
-
268bfd9d1d6403629f807a7a01fd42c0_JaffaCakes118.dll windows:4 windows x86 arch:x86
ee7dab5846f276b3697892af2f43e88a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comdlg32
GetOpenFileNameW
PrintDlgExW
WantArrows
GetSaveFileNameA
user32
SetMenuItemInfoA
SetPropA
SetScrollInfo
SetFocus
SetDlgItemTextA
SetClassLongA
RedrawWindow
PtInRect
PostMessageA
IsWindowVisible
IsIconic
IsDlgButtonChecked
GetWindowRect
GetUpdateRgn
GetSystemMetrics
SetForegroundWindow
GetParent
GetDlgItemTextA
GetDesktopWindow
GetDC
GetClientRect
GetClassLongA
GetCapture
FindWindowA
EnumWindows
EnumChildWindows
DrawTextA
DrawEdge
CreatePopupMenu
CheckMenuItem
AppendMenuA
SetTimer
SetWindowLongA
SetWindowPlacement
GetSysColor
msi
MsiSetComponentStateW
MsiReinstallProductW
MsiRecordSetStringA
MsiRecordSetStreamW
MsiProvideQualifiedComponentW
MsiProvideComponentFromDescriptorW
MsiOpenPackageExW
MsiMessageBoxW
MsiLoadStringW
MsiLoadStringA
MsiIsProductElevatedA
MsiInstallMissingFileW
MsiSetPropertyW
MsiGetSummaryInformationA
MsiGetProductPropertyA
MsiGetLastErrorRecord
MsiGetActiveDatabase
MsiEnumFeaturesA
MsiEnumClientsW
MsiCreateTransformSummaryInfoW
MsiConfigureProductW
MsiConfigureProductExW
MsiConfigureProductA
MsiCloseAllHandles
MsiAdvertiseScriptA
MsiSourceListForceResolutionA
MsiSummaryInfoGetPropertyA
MsiSummaryInfoPersist
MsiSummaryInfoSetPropertyA
MsiSummaryInfoSetPropertyW
MsiVerifyPackageW
MsiViewClose
MsiViewFetch
MsiViewModify
MsiGetUserInfoW
kernel32
EnumSystemLocalesA
CreateEventW
CommConfigDialogW
CloseHandle
CancelDeviceWakeupRequest
CreateMutexW
CreateTimerQueue
DeleteFiber
ExitProcess
FlushFileBuffers
GetACP
GetCommMask
GetCommProperties
GetCommandLineA
GetDateFormatA
GetFileType
GetLogicalDriveStringsW
GetLongPathNameW
GetModuleHandleA
GetOEMCP
GetPrivateProfileSectionNamesW
GetProcessHeap
GetProcessShutdownParameters
GetProcessTimes
GetStartupInfoA
GetThreadLocale
GetTickCount
GetVersionExA
GlobalFlags
GlobalGetAtomNameW
GlobalMemoryStatusEx
HeapAlloc
HeapCreate
WritePrivateProfileStructA
SwitchToThread
SetEnvironmentVariableW
OpenMutexW
OpenJobObjectW
OpenJobObjectA
Module32NextW
MapViewOfFileEx
LocalLock
LocalFree
LeaveCriticalSection
IsBadReadPtr
IsBadHugeReadPtr
HeapValidate
CreateFileW
oledlg
OleUIConvertA
OleUIChangeIconA
OleUICanConvertOrActivateAs
OleUIBusyA
dbghelp
SymRegisterCallback64
SymGetSymPrev
SymEnumSymbols
lmi
ImageRvaToSection
comctl32
CreateStatusWindowA
CreateUpDownControl
DestroyPropertySheetPage
DrawInsert
DrawStatusTextA
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_GetScrollProp
FlatSB_SetScrollPos
GetMUILanguage
ImageList_Add
ImageList_AddMasked
ImageList_Copy
ImageList_DragLeave
ImageList_DragMove
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_Merge
ImageList_Read
ImageList_Remove
ImageList_SetFlags
ImageList_SetImageCount
InitCommonControlsEx
LBItemFromPt
MenuHelp
CreateMappedBitmap
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ