Static task
static1
Behavioral task
behavioral1
Sample
4233e7743bee1964fb13f74ae46b19fb_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4233e7743bee1964fb13f74ae46b19fb_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
4233e7743bee1964fb13f74ae46b19fb_JaffaCakes118
-
Size
93KB
-
MD5
4233e7743bee1964fb13f74ae46b19fb
-
SHA1
bd083fbe380aa8f8c800c3f5ca6cfea88bb82dce
-
SHA256
9d84202aacf8f16be547be8d3a2a67a741e873f33c55f7497d3da5ccb68b0239
-
SHA512
fe6ef9faccc2142f83a55233c60f308e977fdcb3f0839f66aecff47deaf7a70ac4d5c13a13349a0f06f3adcceaa3f136506ebf761d6155f8d7fd926dac4f3182
-
SSDEEP
1536:Oa3I3AzWHWUYe3wgKh6/69QR4WboU0Y75aPsBDLW0IgCsLKg0fvlY9oIn7u6y2pJ:OII3FHW9e3HQ6/6CRg8awnWcRGFlY9Rk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4233e7743bee1964fb13f74ae46b19fb_JaffaCakes118
Files
-
4233e7743bee1964fb13f74ae46b19fb_JaffaCakes118.dll windows:4 windows x86 arch:x86
4f1ec3efb20f5026a23dd7efab48dd2b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryExW
GetModuleFileNameA
GetModuleFileNameW
CreateFileA
GetProcAddress
CreateDirectoryA
CreateDirectoryW
LCMapStringA
LCMapStringW
GetFileAttributesA
GetFileAttributesW
LocalFree
LocalAlloc
FormatMessageA
InterlockedExchange
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedDecrement
InterlockedIncrement
LoadLibraryExA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
FindClose
SizeofResource
LoadResource
LockResource
WriteFile
CloseHandle
DisableThreadLibraryCalls
GetVersionExA
FreeLibrary
CreateThread
lstrcpyW
FindResourceW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
GetModuleHandleW
GetModuleHandleA
InterlockedCompareExchange
CompareStringW
VirtualProtect
lstrlenW
GetCommandLineA
user32
GetMenuItemID
SetCapture
InvalidateRect
GetSystemMetrics
SetCursor
MapWindowPoints
ScreenToClient
GetWindowRect
TrackPopupMenu
EnableMenuItem
IsIconic
IsWindow
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetClientRect
GetFocus
GetSubMenu
DestroyMenu
GetMenuItemCount
CreatePopupMenu
CheckMenuRadioItem
LoadMenuW
LoadMenuA
SetDlgItemTextW
SetDlgItemTextA
DefWindowProcW
DefWindowProcA
PostMessageW
GetWindowLongW
GetWindowLongA
SetWindowLongW
GetMenuItemInfoW
GetMenuItemInfoA
InsertMenuW
InsertMenuA
SendMessageW
SendMessageA
OpenInputDesktop
CloseDesktop
GetParent
DestroyIcon
GetDlgItemInt
SetDlgItemInt
GetDlgItem
GetDC
ReleaseDC
ShowWindow
MessageBeep
DeleteMenu
GetMenuState
GetDesktopWindow
SetFocus
CreateMenu
CreateWindowExA
CreateWindowExW
LoadImageA
LoadImageW
LoadIconA
LoadIconW
MessageBoxA
MessageBoxW
LoadStringW
LoadStringA
SendDlgItemMessageW
LoadCursorW
LoadCursorA
ReleaseCapture
advapi32
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RevertToSelf
RegOpenKeyExA
RegCloseKey
gdi32
GetTextExtentPointW
ole32
RegisterDragDrop
msvcrt
_adjust_fdiv
malloc
_initterm
free
_amsg_exit
_XcptFilter
_except_handler3
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ