__RemovePropW@12
Static task
static1
Behavioral task
behavioral1
Sample
3c07f07dceed9e3099abb80312512bb6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c07f07dceed9e3099abb80312512bb6_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3c07f07dceed9e3099abb80312512bb6_JaffaCakes118
-
Size
146KB
-
MD5
3c07f07dceed9e3099abb80312512bb6
-
SHA1
5ce1b39975da59f428b1179d781c3d2b5f7b3402
-
SHA256
e81918e0129fe1bf6a7180f0d0f00886de451e26652587ebc4097209d415eff0
-
SHA512
42f2456ee4ac84520e3daeb2d2af5955939cb8428f2aca2c0fa3759c305eb498d31749ae5ddc7be76ec6161b9505a7fbb54b71b537c28dbce4657f32f8697330
-
SSDEEP
3072:PXtKQ3IOKzyXQ8WUTszZVf3//cCy8OHB:Puv8WUTsnfcCy7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c07f07dceed9e3099abb80312512bb6_JaffaCakes118
Files
-
3c07f07dceed9e3099abb80312512bb6_JaffaCakes118.dll windows:5 windows x86 arch:x86
8ae74cf5b0e52f8704cac79b7955e656
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
StrCpyNW
PathUnquoteSpacesA
StrFromTimeIntervalA
PathCombineA
StrFormatKBSizeA
shell32
ord716
kernel32
LockFile
GetCommConfig
TlsSetValue
SetFileShortNameW
GetProfileStringW
GetStartupInfoA
ChangeTimerQueueTimer
QueryPerformanceCounter
FileTimeToDosDateTime
SetProcessWorkingSetSize
CreateDirectoryExW
SignalObjectAndWait
LoadLibraryExW
SetNamedPipeHandleState
CreateSemaphoreA
GetLogicalDriveStringsW
lstrcpynA
CreateMutexW
GetDevicePowerState
user32
ReplyMessage
HideCaret
CopyAcceleratorTableW
EnumThreadWindows
GetDlgItemTextW
ScrollWindowEx
WindowFromDC
LoadBitmapW
MapVirtualKeyExW
LoadAcceleratorsW
GetDC
WinHelpA
IsCharLowerA
GetMenuStringW
GetClipCursor
CopyImage
DialogBoxIndirectParamW
DrawTextA
DlgDirSelectExW
InvalidateRgn
DrawTextExW
TranslateMessage
SetCursorPos
GetRawInputBuffer
PeekMessageW
TranslateAcceleratorA
GetListBoxInfo
GetTabbedTextExtentA
SetMenu
AdjustWindowRectEx
MessageBoxW
MapWindowPoints
LoadKeyboardLayoutA
SetWindowTextW
CopyRect
GetMessageTime
DispatchMessageW
GetWindowThreadProcessId
SetPropA
gdi32
ScaleWindowExtEx
GetTextExtentPointW
GetOutlineTextMetricsW
CreateBrushIndirect
BeginPath
GetCurrentObject
GetCharWidthW
Arc
GetCharABCWidthsI
RemoveFontResourceA
GetLayout
GetEnhMetaFileA
SetPixel
PolyTextOutA
advapi32
GetAce
AddAuditAccessObjectAce
AreAllAccessesGranted
BackupEventLogW
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.page Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmem Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedat Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 958B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ