Static task
static1
Behavioral task
behavioral1
Sample
3d11e0d81deccf6b9f3f9069b2e6ae86_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3d11e0d81deccf6b9f3f9069b2e6ae86_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3d11e0d81deccf6b9f3f9069b2e6ae86_JaffaCakes118
-
Size
301KB
-
MD5
3d11e0d81deccf6b9f3f9069b2e6ae86
-
SHA1
453f8f078afc3c34e1b682b3d69ee678a348daf6
-
SHA256
0a2e1a1575a4e2dc1d9360c322416e61532ffac3222eb4b58d06041e0cfaa18e
-
SHA512
e5988491935b2454b2e817edd7cb30627294639f0ccd73ee582c90d8cca3833f28c85d7c273bad2402def42eba08768cbbd0f7758bab8df3dc7ccebe27a8ef98
-
SSDEEP
6144:jMNqJ4lOom0dwWxArZNFjvQRUDqCszzdkjrCpc0NwIrpgurS7dB4Fwt:jMPlOom0dwTrztIRUOCsinCm0NwzurSd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d11e0d81deccf6b9f3f9069b2e6ae86_JaffaCakes118
Files
-
3d11e0d81deccf6b9f3f9069b2e6ae86_JaffaCakes118.dll windows:4 windows x86 arch:x86
3f27ea5ed40b31b1bc4047c64528d934
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
GetACP
GlobalFindAtomA
GetThreadLocale
ExitProcess
GlobalDeleteAtom
RaiseException
GetOEMCP
GetProcessHeap
HeapFree
VirtualAllocEx
GetUserDefaultLCID
GetLastError
GetModuleHandleA
GetModuleHandleW
LoadLibraryA
GetProcAddress
GetStringTypeW
InitializeCriticalSection
LockResource
GetLocalTime
LoadResource
GetStdHandle
HeapAlloc
LocalAlloc
GetVersion
ExitThread
GlobalAddAtomA
GlobalAlloc
GetStringTypeA
GetTickCount
LoadLibraryExA
IsBadReadPtr
GetStartupInfoA
GetVersionExA
GetLocaleInfoA
GetCommandLineA
GetSystemDefaultLangID
shlwapi
PathIsDirectoryA
SHQueryInfoKeyA
shell32
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHFileOperationA
SHGetDesktopFolder
SHGetSpecialFolderLocation
msvcrt
strncmp
fabs
gdi32
SetTextColor
GetPaletteEntries
GetDCOrgEx
CreateCompatibleBitmap
GetPixel
SelectObject
CreateCompatibleDC
GetDIBColorTable
GetObjectA
SaveDC
CreateFontIndirectA
GetRgnBox
GetDIBits
CreatePenIndirect
GetBitmapBits
BitBlt
SelectPalette
LineTo
CopyEnhMetaFileA
CreateBitmap
GetCurrentPositionEx
CreateDIBitmap
CreateBrushIndirect
SetBkMode
RestoreDC
CreateDIBSection
SetBkColor
SetPixel
CreatePalette
GetClipBox
version
VerFindFileA
comdlg32
ChooseColorA
user32
EnableScrollBar
GetDlgItem
DrawIconEx
FrameRect
EnableMenuItem
DrawTextA
GetCapture
GetForegroundWindow
GetClipboardData
EnableWindow
EqualRect
EnumChildWindows
GetClassInfoA
GetDC
FindWindowA
DrawMenuBar
GetActiveWindow
GetCursorPos
GetFocus
GetClassNameA
FillRect
EmptyClipboard
GetCursor
EnumThreadWindows
EndPaint
GetDCEx
GetDesktopWindow
EnumWindows
GetClientRect
ole32
CLSIDFromString
CoDisconnectObject
oleaut32
SafeArrayGetUBound
SysStringLen
OleLoadPicture
comctl32
ImageList_Write
ImageList_Draw
ImageList_Create
ImageList_Destroy
ImageList_DrawEx
ImageList_Remove
ImageList_Read
ImageList_GetBkColor
ImageList_Add
ImageList_DragShowNolock
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc9 Size: 512B - Virtual size: 91B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc2 Size: 174KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc5 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ