Static task
static1
Behavioral task
behavioral1
Sample
305074f888b64afdc99035b62513ede2_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
305074f888b64afdc99035b62513ede2_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
305074f888b64afdc99035b62513ede2_JaffaCakes118
-
Size
237KB
-
MD5
305074f888b64afdc99035b62513ede2
-
SHA1
aa0aafc889e8f75a6cc89b4aa2e9733fea1dbf9a
-
SHA256
1a1bcbbedb8cd3ede173c837b58b2bf0dfa5688ab5c27b8de5f3076e2b353936
-
SHA512
12c52e07c0a94bf6f6e8412cc6416ed084f0f13f2745152807e87d59ee615b4d4976e433f39e6dc35735c4d04c80852b07178bbff7ecf485f1d6c7d9f24a3c74
-
SSDEEP
6144:/g92V4PGZhDn2gSVba49we9Saaex+Z1KvVEu:LyGZhBxsfj+Zwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 305074f888b64afdc99035b62513ede2_JaffaCakes118
Files
-
305074f888b64afdc99035b62513ede2_JaffaCakes118.dll windows:4 windows x86 arch:x86
e14f77ef26a96580bd591409a95bf42a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gdi32
RestoreDC
SetPixel
CreateBrushIndirect
SetTextColor
kernel32
GetLastError
GetACP
IsBadHugeReadPtr
GetVersionExA
lstrlenW
GetModuleHandleA
CloseHandle
VirtualAllocEx
GetFullPathNameA
ExitProcess
FindResourceA
ExitThread
lstrcatA
CreateThread
lstrcmpiA
Sleep
GetDiskFreeSpaceA
lstrlenA
HeapAlloc
GetProcAddress
lstrcmpA
GlobalAlloc
GetSystemDefaultLangID
GetCurrentThreadId
lstrcpynA
LocalAlloc
LoadLibraryExA
GetCommandLineA
GetFileSize
SetErrorMode
DeleteFileA
GetCurrentProcess
comdlg32
ChooseColorA
version
GetFileVersionInfoSizeA
comctl32
ImageList_Read
ImageList_Add
ImageList_Draw
ImageList_Create
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Remove
shlwapi
PathIsDirectoryA
PathFileExistsA
SHGetValueA
SHEnumValueA
SHQueryInfoKeyA
SHStrDupA
PathGetCharTypeA
shell32
SHGetFolderPathA
SHGetSpecialFolderLocation
SHGetFileInfoA
oleaut32
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayGetElement
GetErrorInfo
SysStringLen
SafeArrayPtrOfIndex
user32
CallNextHookEx
BeginPaint
AdjustWindowRectEx
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 1024B - Virtual size: 861B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ