Static task
static1
Behavioral task
behavioral1
Sample
3a04357b04599fa2b97d9e6c8b0c88a2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a04357b04599fa2b97d9e6c8b0c88a2_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3a04357b04599fa2b97d9e6c8b0c88a2_JaffaCakes118
-
Size
251KB
-
MD5
3a04357b04599fa2b97d9e6c8b0c88a2
-
SHA1
8f9c76fc33edd929836d43662599f8ea24509e9b
-
SHA256
d489137568c07290d1bdfd3f262f885b31d9f86ce0aa897aadf5eba210cf9827
-
SHA512
fb6548f12170c83eb9ecc12b0b4521c78b32107ca7a9446b6decc45caa55229eac1d403cfdc978f59c0ee84de1a5c1233ab9732b88eb453c9ee5e2e9068af230
-
SSDEEP
3072:kXol+h+P2+fTDqAtEO0kajhmEOh0I2eQZZuQrwRwLUYn5CzJTKKcPcB6Hjfmnjiz:kXo3qGEHthvZ9Ld0dKjP76mv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a04357b04599fa2b97d9e6c8b0c88a2_JaffaCakes118
Files
-
3a04357b04599fa2b97d9e6c8b0c88a2_JaffaCakes118.dll windows:4 windows x86 arch:x86
e19c10bfe91497a66de87d7f3dd38cfc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LocalAlloc
HeapDestroy
HeapCreate
lstrcpyW
VirtualFree
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
HeapReAlloc
GetTimeZoneInformation
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
gdi32
GetTextColor
GetBkColor
GetMapMode
GetTextExtentPoint32W
CreateFontIndirectW
CreateSolidBrush
GetStockObject
CreatePatternBrush
DeleteDC
user32
SendDlgItemMessageW
IsDialogMessageW
SetWindowTextW
MoveWindow
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
CallWindowProcW
DefWindowProcW
PtInRect
DeferWindowPos
ScreenToClient
RegisterClassW
GetClassInfoExW
CreateWindowExW
MessageBoxW
GetClientRect
SetForegroundWindow
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageW
GetForegroundWindow
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
shlwapi
PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathCombineW
shell32
SHGetFolderPathW
DragQueryFileW
DragFinish
CommandLineToArgvW
SHFileOperationW
oleaut32
DispGetIDsOfNames
DispGetIDsOfNames
OleTranslateColor
CreateErrorInfo
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString
ole32
CoRevokeClassObject
OleIsCurrentClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
OleFlushClipboard
CoRegisterMessageFilter
comdlg32
GetFileTitleW
oledlg
OleUIBusyW
Sections
.text Size: 147KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ