GetFlashSetting
Static task
static1
Behavioral task
behavioral1
Sample
27e7785d851fed92a1d36cb2d22e3abe_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27e7785d851fed92a1d36cb2d22e3abe_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
27e7785d851fed92a1d36cb2d22e3abe_JaffaCakes118
-
Size
346KB
-
MD5
27e7785d851fed92a1d36cb2d22e3abe
-
SHA1
d90ce59b2c0ec314bcace915880f83c5b21f0a7a
-
SHA256
734bbcf7f8ca9f2b795a829d701f12a6b685c687b30a26209799a753a7152ee5
-
SHA512
b5cf069c487958b3eb49d2c59df4a3b12bf1ff2b1ed7052a5c1e7458617be67c3edaa2dfc5e733758fe2e7c8379f92671b5ec36db24f612286b7c85c1c7b0942
-
SSDEEP
6144:+8Uh6Ck+AkIHH03MqOn/pATcH1IF+I+6oU4fNzMpiZOqIYCLcDa:bXCk+S03pe/vVF+PCIDL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27e7785d851fed92a1d36cb2d22e3abe_JaffaCakes118
Files
-
27e7785d851fed92a1d36cb2d22e3abe_JaffaCakes118.dll windows:4 windows x86 arch:x86
49370d905d6b046c1adf168ff24c80bb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
setupapi
CM_Get_DevNode_Status
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data
CM_Get_Res_Des_Data_Size
CM_Get_Next_Res_Des
CM_Get_First_Log_Conf
SetupDiGetDeviceRegistryPropertyW
CM_Get_Device_IDW
CM_Get_Parent
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
kernel32
GetLocaleInfoA
SizeofResource
LockResource
LoadResource
FindResourceExW
CreateFileW
DeviceIoControl
GetLastError
CloseHandle
LoadLibraryA
RaiseException
EnterCriticalSection
LeaveCriticalSection
SetEvent
WaitForMultipleObjects
LocalAlloc
LocalFree
InitializeCriticalSection
DeleteCriticalSection
SetWaitableTimer
CreateEventW
CreateWaitableTimerW
SetFilePointer
GetConsoleCP
GetConsoleMode
FindResourceW
HeapCreate
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStringTypeW
VirtualFree
VirtualAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetStringTypeA
SetStdHandle
user32
RegisterDeviceNotificationW
UnregisterDeviceNotification
UnregisterClassA
advapi32
RegisterServiceCtrlHandlerExW
StartServiceCtrlDispatcherW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SetServiceStatus
ole32
StringFromGUID2
CoInitialize
CoUninitialize
CoCreateInstance
Exports
Exports
Sections
.text Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ