Static task
static1
Behavioral task
behavioral1
Sample
3c13d3a1dfad4b318b6d98258bd55830_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
3c13d3a1dfad4b318b6d98258bd55830_JaffaCakes118
-
Size
137KB
-
MD5
3c13d3a1dfad4b318b6d98258bd55830
-
SHA1
15fb81137c0f7e390f1388721898625dda2dd206
-
SHA256
165fadd70436a84087d7313b8d604326e609cb0512fba8bf7a446eb537c04c84
-
SHA512
ee72054fe2f24d4e0cfff78fd39184544771f26ca0f16af07348528b32f510ebf4584fb4ae3eeb85ee7e903213b645d8b87306e603e0f44f25ebc18317ef7b9f
-
SSDEEP
3072:KdJvHG/utW3pHJlsh17+5rk+2tfTdKNSCBfQPJh35:KddfV1YY+EKN+PJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c13d3a1dfad4b318b6d98258bd55830_JaffaCakes118
Files
-
3c13d3a1dfad4b318b6d98258bd55830_JaffaCakes118.dll windows:4 windows x86 arch:x86
9b4f0314d20fca9be4869f58628eaf10
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalDeleteAtom
CreateDirectoryA
LCMapStringW
MoveFileW
GetProcessHeap
GetFullPathNameA
GetTimeZoneInformation
GetPrivateProfileIntW
WaitForMultipleObjectsEx
GetCurrentThreadId
GetFileAttributesA
lstrlenW
SystemTimeToFileTime
FormatMessageW
GetCurrentThread
DeleteFileW
CreateFileMappingW
LeaveCriticalSection
lstrcmpiA
GetProcAddress
FormatMessageA
DeleteCriticalSection
GetFileSize
lstrcpynA
CreateProcessW
MapViewOfFile
GetLocalTime
LockResource
FindResourceW
GetLocaleInfoA
TlsAlloc
RemoveVectoredExceptionHandler
GetLastError
AddVectoredExceptionHandler
CreateFileA
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualQuery
GetSystemInfo
VirtualProtect
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
Sleep
GetModuleFileNameW
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
LCMapStringA
RtlUnwind
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleHandleW
InitializeCriticalSection
LoadLibraryA
GetModuleFileNameA
GetStdHandle
WriteFile
CloseHandle
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetOEMCP
GetACP
InterlockedDecrement
GetCPInfo
OutputDebugStringA
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
EnterCriticalSection
SetUnhandledExceptionFilter
GetPrivateProfileStringW
IsBadStringPtrW
CreateDirectoryW
FileTimeToLocalFileTime
GetProcessHeaps
IsBadStringPtrA
InterlockedIncrement
GetEnvironmentVariableA
lstrlenA
GlobalUnlock
HeapDestroy
GetCurrentProcessId
FindFirstFileW
SetStdHandle
GetVersion
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CreateFileW
IsBadReadPtr
GetDateFormatA
GetEnvironmentVariableW
GetVersionExA
GetCommandLineA
ExitProcess
GetModuleHandleA
HeapAlloc
HeapReAlloc
SystemTimeToTzSpecificLocalTime
FreeResource
WaitForSingleObject
user32
GetMenuItemID
GetDesktopWindow
DrawMenuBar
SetMenu
RedrawWindow
GetMenuItemInfoW
SetMenuItemInfoW
GetClassNameW
GetShellWindow
EndPaint
GetSubMenu
wsprintfA
GetDlgItemTextW
MsgWaitForMultipleObjects
GetWindowPlacement
EnumChildWindows
IsDialogMessageW
MapWindowPoints
EnableWindow
CreateDialogParamW
DeferWindowPos
CheckDlgButton
FrameRect
SendMessageA
SendDlgItemMessageA
ReleaseCapture
GetDlgCtrlID
GetWindowRect
SendMessageTimeoutW
DrawIconEx
GetClientRect
GetFocus
ShowWindow
SetWindowLongW
GetMenuStringW
SendDlgItemMessageW
GetWindowTextLengthW
CallWindowProcW
FindWindowExW
SetRect
RegisterClassExW
DialogBoxParamW
FillRect
CheckMenuItem
CopyIcon
CharUpperBuffW
SetWindowPlacement
CreateMenu
SetScrollPos
IsRectEmpty
ScrollWindowEx
GetForegroundWindow
SetClipboardData
SystemParametersInfoW
GetWindowLongW
ScreenToClient
CallNextHookEx
GetDC
GetParent
GetDlgItemTextA
SetForegroundWindow
EndDialog
SetActiveWindow
gdi32
SetBkMode
SetTextColor
ExtTextOutA
CreateSolidBrush
CombineRgn
DeleteObject
GetTextMetricsW
CreateHatchBrush
LineTo
CreatePen
GetDIBits
GetTextExtentPoint32A
SelectClipRgn
DeleteDC
comdlg32
GetOpenFileNameA
ChooseFontW
advapi32
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
shell32
SHGetDesktopFolder
ExtractIconExW
ExtractIconW
ole32
CoTaskMemFree
OleUninitialize
CoTaskMemAlloc
RevokeDragDrop
version
GetFileVersionInfoW
ws2_32
select
ioctlsocket
WSAStartup
comctl32
ImageList_DragEnter
InitCommonControlsEx
ImageList_GetIcon
winmm
PlaySoundA
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ