uEQYr_Wiy
Static task
static1
Behavioral task
behavioral1
Sample
3b1be998599d872b8bd5c3ff17f784ad_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b1be998599d872b8bd5c3ff17f784ad_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3b1be998599d872b8bd5c3ff17f784ad_JaffaCakes118
-
Size
140KB
-
MD5
3b1be998599d872b8bd5c3ff17f784ad
-
SHA1
53c10944597bcaa3c4cded65a23f907054b4b8a7
-
SHA256
ee83eca30268626158afcdf986c8398fa83ab5d24c96764376dddc191fb11665
-
SHA512
1f11b0cb04f77f6814ac5d738fff7cb1c15a20766b3bfc3817fbfa6b144bdb36a56fb78dd15966724b77c805f7d0bcec55de4462ca30d0a84e666fa6cfafcc04
-
SSDEEP
1536:HfrZkg2VTw9QZGxJ7xeUCn/TG1ayOTKCber57+LjNsbbS1yWC0NIAjhqY030bXpq:DZl2maZGxJ7xGhyqWp+LX1Kejs0bXf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b1be998599d872b8bd5c3ff17f784ad_JaffaCakes118
Files
-
3b1be998599d872b8bd5c3ff17f784ad_JaffaCakes118.dll windows:4 windows x86 arch:x86
48e7c035c6e7f6d5e267782ea776c198
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CreateDialogParamA
GetDlgItem
CheckDlgButton
IsDlgButtonChecked
EnableWindow
CopyIcon
DestroyCursor
SetCursor
PtInRect
GetCursorPos
SetForegroundWindow
FindWindowA
PostMessageA
IsWindowVisible
SetCapture
TrackPopupMenu
ClientToScreen
AppendMenuA
CreatePopupMenu
ReleaseCapture
ScreenToClient
SetTimer
GetDesktopWindow
SetWindowTextA
GetForegroundWindow
SendMessageA
CheckRadioButton
EndPaint
GetClientRect
RedrawWindow
LockWindowUpdate
LoadIconA
CreateWindowExA
DestroyWindow
wsprintfA
GetDC
MapWindowPoints
MessageBoxA
LoadStringA
GetParent
IsWindow
GetWindowRect
UpdateWindow
SetWindowPos
GetSystemMetrics
ReleaseDC
DialogBoxParamA
CopyRect
DrawStateA
FrameRect
InflateRect
GetSysColor
FillRect
DrawFrameControl
OffsetRect
DrawTextA
DrawFocusRect
SetWindowLongA
EndDialog
GetWindowLongA
ShowWindow
LoadCursorA
GetWindowTextA
InvalidateRect
IsChild
CloseWindow
SetFocus
GetWindowPlacement
BeginPaint
gdi32
DeleteDC
SetBkColor
SetTextColor
DeleteObject
CreateSolidBrush
SetBkMode
SetDCBrushColor
CreateCompatibleDC
BitBlt
GetObjectA
GetStockObject
SelectObject
Rectangle
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
shell32
ShellExecuteA
ole32
IIDFromString
StringFromIID
comctl32
ImageList_LoadImageA
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 422KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ