bfza
Static task
static1
Behavioral task
behavioral1
Sample
2d72f0cc2e530b1ab7a94ea32dcfcd63_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d72f0cc2e530b1ab7a94ea32dcfcd63_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2d72f0cc2e530b1ab7a94ea32dcfcd63_JaffaCakes118
-
Size
55KB
-
MD5
2d72f0cc2e530b1ab7a94ea32dcfcd63
-
SHA1
f48064242fb067cbb011828ac41d64f42ea53d3c
-
SHA256
7d7271c3e3387600daee5a6ffadeea2e51c579a187c2cc1ec4375397629c42df
-
SHA512
a0d5ae859365d482af26e3a9c171577bbf395d006902c4645ffdf765036b4767581bc3f8b09d6c97ae97e4cb726ba5d123154018dbbb596d36c3525c247c5ab6
-
SSDEEP
768:2yqMK4FRywP4HFNczwNCHJyZY8PBjruY7+AzLJQ+lbaSexbrhgN+UERbG6qM8DNq:zFVCFxMJyDjruIbtaSe5VXZ0MK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d72f0cc2e530b1ab7a94ea32dcfcd63_JaffaCakes118
Files
-
2d72f0cc2e530b1ab7a94ea32dcfcd63_JaffaCakes118.dll windows:4 windows x86 arch:x86
01dfb71bf45858d4e0257828e7a1d70c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetPrivateProfileStringW
FindVolumeClose
FindFirstVolumeA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
Sleep
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
FindResourceExA
GlobalAddAtomA
GetLogicalDrives
FileTimeToLocalFileTime
GetCommConfig
RequestWakeupLatency
GetTimeZoneInformation
ExitThread
FindResourceW
GetFileAttributesW
GetFileAttributesExW
SetConsoleCursorInfo
SetLocalTime
SetComputerNameW
GetStartupInfoW
MulDiv
GetSystemDefaultLCID
DefineDosDeviceA
GetDiskFreeSpaceExA
CreateMutexA
BuildCommDCBAndTimeoutsW
FreeLibraryAndExitThread
CreateHardLinkA
SetEndOfFile
GetCurrentProcess
GetProcessPriorityBoost
ReadProcessMemory
FreeResource
GetFileType
EnumSystemLocalesA
FindNextVolumeA
lstrcpynW
GetLargestConsoleWindowSize
QueueUserAPC
FindNextChangeNotification
lstrcmpiA
GetSystemTimeAsFileTime
SetInformationJobObject
SetLastError
Beep
GetProcessHeap
HeapFree
QueryPerformanceCounter
HeapAlloc
user32
KillTimer
GetWindowThreadProcessId
CharLowerBuffA
CreateIconIndirect
UnhookWinEvent
SetCursorPos
VkKeyScanExA
GetDlgItemTextW
SetTimer
GetPropA
InvalidateRgn
advapi32
RegLoadKeyW
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_cexit
__getmainargs
memset
_controlfp
?terminate@@YAXXZ
_exit
ntdll
RtlUnwind
gdi32
TextOutW
GetCharABCWidthsFloatW
ExcludeClipRect
SetICMProfileA
PolylineTo
StartPage
SetWorldTransform
GetViewportOrgEx
ColorMatchToTarget
FillRgn
FlattenPath
GetGraphicsMode
ExtTextOutA
EnumEnhMetaFile
GetDCOrgEx
SetEnhMetaFileBits
CreateFontA
SetDIBits
GetGlyphIndicesW
GetColorAdjustment
TranslateCharsetInfo
ResetDCA
GetGlyphOutlineW
SetGraphicsMode
RemoveFontResourceA
GetDeviceGammaRamp
DeleteColorSpace
GetCharWidthFloatA
GetArcDirection
DescribePixelFormat
GetStretchBltMode
PlayMetaFile
CombineRgn
EnumFontFamiliesExW
EnumFontsW
GetMetaRgn
GetRegionData
FillPath
EnumFontFamiliesExA
GetDCBrushColor
GetEnhMetaFileW
StrokePath
DPtoLP
GetCharABCWidthsFloatA
ExtSelectClipRgn
GetGlyphOutlineA
InvertRgn
SetDIBitsToDevice
SetBkColor
GetMapMode
wininet
InternetCloseHandle
InternetOpenA
Exports
Exports
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ