GetClass
Static task
static1
Behavioral task
behavioral1
Sample
39e805042e9ac176f16a079f55d15b5c_JaffaCakes118.dll
Resource
win7-20241010-en
General
-
Target
39e805042e9ac176f16a079f55d15b5c_JaffaCakes118
-
Size
253KB
-
MD5
39e805042e9ac176f16a079f55d15b5c
-
SHA1
7eb23c62e8e1886905282a067300e9828d97975c
-
SHA256
4754a5c9610519b9eddf7768158b89c2b9f65fcbf101db3a8a8408d1c3ed101f
-
SHA512
ed7e60e3205b6a8f51095ef808aa71ad188e18b2c5b84a033e970e7bd8c0e065a551b02ea529dd9a1fa9e23a0fd491aebbdb54c0f5aaf53f72560747b6b0ba66
-
SSDEEP
3072:0PQdEOItJPxluIalXQOr+nxQNBO0jTL23i7eBnaVImWeqSR4G78SYSuDSMv6UWN:MUr+nxQNBO0jf2Ee5aSzeF4DSY7Dh6f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39e805042e9ac176f16a079f55d15b5c_JaffaCakes118
Files
-
39e805042e9ac176f16a079f55d15b5c_JaffaCakes118.dll windows:4 windows x86 arch:x86
8ce87900279a2c5d67be86bdc38f51d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect
GetCurrentThread
GetConsoleCP
GetACP
GlobalFindAtomW
RemoveDirectoryA
comctl32
InitCommonControls
comdlg32
FindTextA
ReplaceTextA
PrintDlgExW
winmm
mid32Message
oledlg
OleUIChangeIconA
oleaut32
VarDecFromUI2
user32
GetRawInputBuffer
shell32
OpenAs_RunDLLA
ShellHookProc
SHInvokePrinterCommandA
SHFind_InitMenuPopup
FreeIconList
winspool.drv
PlayGdiScriptOnPrinterIC
AddPrintProcessorA
version
VerInstallFileW
VerFindFileA
VerFindFileW
GetFileVersionInfoSizeA
oleacc
IID_IAccessible
ole32
ReleaseStgMedium
CoGetSystemSecurityPermissions
gdi32
GetClipRgn
gdiplus
GdipVectorTransformMatrixPointsI
GdipIsStyleAvailable
shlwapi
SHGetValueW
ChrCmpIW
imagehlp
FindExecutableImage
ImageUnload
SymEnumSym
SymInitialize
msimg32
vSetDdrawflag
Exports
Exports
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 98.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdatat Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ