Static task
static1
Behavioral task
behavioral1
Sample
2c8f062983213258aafdba62f2794264_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c8f062983213258aafdba62f2794264_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2c8f062983213258aafdba62f2794264_JaffaCakes118
-
Size
194KB
-
MD5
2c8f062983213258aafdba62f2794264
-
SHA1
256775754cd25a1e5dac0204244e39731cedb998
-
SHA256
3aa882cfd4683a17f2724feff4cfc4ec903d2437f2a856873d2fe26966c483ce
-
SHA512
3f1e6f61b47c7f6843d8369a59e940f18d694ab3640aa0200ec35432bbff6dbad66d2a3304e362dcd3e84950c66b6d00dbd9689d1693de7263b2adab31c9da44
-
SSDEEP
3072:tai4IrNA8SLmwUVZ6LmKpkC7lS8fYuEFjzzhhjVsc12:4Im5mKKgPYVFjR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c8f062983213258aafdba62f2794264_JaffaCakes118
Files
-
2c8f062983213258aafdba62f2794264_JaffaCakes118.dll windows:5 windows x86 arch:x86
70c15d2b0ae938b0f3dd4df23e3d3123
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetWindowsDirectoryW
lstrcatW
CloseHandle
VirtualAllocEx
CreateFileW
user32
EndPaint
PostQuitMessage
BeginPaint
DefWindowProcA
LoadIconA
gdi32
DPtoLP
DeleteColorSpace
DeviceCapabilitiesExW
EngAcquireSemaphore
EngCheckAbort
EngCreateDeviceBitmap
EngFindResource
EngGradientFill
EngReleaseSemaphore
FONTOBJ_pxoGetXform
FrameRgn
GdiComment
GdiConvertEnhMetaFile
GdiCreateLocalEnhMetaFile
GdiEntry11
CreateDiscardableBitmap
GdiSetServerAttr
GdiSwapBuffers
GetBoundsRect
GetCharWidthA
GetColorAdjustment
GetEnhMetaFilePaletteEntries
GetFontLanguageInfo
GetFontUnicodeRanges
GetMapMode
GetObjectA
GetPolyFillMode
CopyEnhMetaFileW
GetStretchBltMode
LPtoDP
LineTo
OffsetRgn
PolyBezier
PolyDraw
PtVisible
RemoveFontResourceExW
SetBrushOrgEx
SetEnhMetaFileBits
SetFontEnumeration
SetPolyFillMode
SetTextCharacterExtra
SetViewportOrgEx
CloseEnhMetaFile
CLIPOBJ_ppoGetPath
GdiEntry2
GetROP2
comdlg32
GetFileTitleA
FindTextA
GetSaveFileNameA
GetSaveFileNameW
PageSetupDlgA
PageSetupDlgW
PrintDlgW
PrintDlgA
ChooseFontA
ChooseColorA
CommDlgExtendedError
ChooseFontW
advapi32
RegOpenKeyExW
RegOpenKeyW
msvcrt
_cexit
_fdopen
_spawnl
_stat
_strdup
_sys_errlist
_timezone
_wgetdcwd
atexit
ctime
setlocale
Sections
.text Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ