Static task
static1
Behavioral task
behavioral1
Sample
3f342278a6667f4ca8ac27ae82581786_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f342278a6667f4ca8ac27ae82581786_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3f342278a6667f4ca8ac27ae82581786_JaffaCakes118
-
Size
292KB
-
MD5
3f342278a6667f4ca8ac27ae82581786
-
SHA1
86e49b479ec5ba2ea9c17109c27e49b8eb126e84
-
SHA256
12eafe6745aed5b19d0979eec2f6822e804e0ff91f4fe8cc5b733029e2d24e61
-
SHA512
1373f4358db21a199d5a75e476bf9758c7a1eb2d51f88f438441894d8128ed0cc873deefddfdbb7a85d289785fd1aed67cfd569c457164a94161e476c37003d9
-
SSDEEP
6144:zqKFjUTeksLP1SroYsgrIb+JUBjL1Zmm8AlMtGCL77oe:zqKFrksLgrnF5KBZm6CGw7x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f342278a6667f4ca8ac27ae82581786_JaffaCakes118
Files
-
3f342278a6667f4ca8ac27ae82581786_JaffaCakes118.dll windows:4 windows x86 arch:x86
266ad7e1339180e24a9aa5e539fc4927
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shell32
SHGetDiskFreeSpaceA
SHGetDesktopFolder
SHGetFileInfoA
SHFileOperationA
SHGetFolderPathA
gdi32
GetPaletteEntries
SetBkMode
SetTextColor
GetPixel
CreateBitmap
CreatePalette
SetPixel
msvcrt
sprintf
user32
DrawTextA
SendMessageW
GetClientRect
GetWindow
RemoveMenu
SetClipboardData
DestroyWindow
EnumChildWindows
FrameRect
UnhookWindowsHookEx
EmptyClipboard
SetParent
CheckMenuItem
ReleaseCapture
GetActiveWindow
GetScrollPos
IsWindowVisible
KillTimer
MsgWaitForMultipleObjects
GetDC
wsprintfA
GetScrollInfo
GetTopWindow
CloseClipboard
MoveWindow
DestroyIcon
DispatchMessageW
IsDialogMessageW
GetCapture
GetWindowLongW
BeginPaint
DispatchMessageA
GetClassLongA
RegisterWindowMessageA
GetForegroundWindow
GetMenuItemCount
GetMessagePos
IsRectEmpty
GetDesktopWindow
SetCursor
IntersectRect
SetTimer
CharUpperBuffA
GetClassNameA
GetSystemMetrics
InsertMenuItemA
ShowScrollBar
SetWindowLongA
SetClassLongA
EnableScrollBar
SendMessageA
ScrollWindow
EnableMenuItem
SetCapture
ShowOwnedPopups
PostMessageA
GetScrollRange
CallNextHookEx
IsDialogMessageA
GetMenuStringA
EnableWindow
DrawMenuBar
DrawAnimatedRects
GetKeyboardState
EnumThreadWindows
CreateIcon
CharNextA
IsIconic
SetWindowTextA
SetScrollInfo
SetWindowLongW
GetWindowLongA
GetWindowTextA
FindWindowA
GetWindowDC
GetFocus
GetWindowThreadProcessId
IsWindow
GetWindowPlacement
LoadCursorA
MessageBeep
EndPaint
IsWindowUnicode
PeekMessageW
ActivateKeyboardLayout
PeekMessageA
SetWindowPos
GetSubMenu
DefWindowProcA
OpenClipboard
FillRect
DefFrameProcA
LoadKeyboardLayoutA
GetSystemMenu
WaitMessage
ShowWindow
PtInRect
DefMDIChildProcA
GetKeyNameTextA
LoadBitmapA
CharLowerA
GetLastActivePopup
DrawEdge
TrackPopupMenu
IsWindowEnabled
CharNextW
MapWindowPoints
GetMenu
GetDlgItem
GetPropA
RedrawWindow
CreateWindowExA
GetKeyboardLayout
CharToOemA
GetKeyboardType
GetClassInfoA
ReleaseDC
UnregisterClassA
CreatePopupMenu
LoadIconA
CharLowerBuffA
IsChild
EqualRect
SetActiveWindow
SetPropA
GetSysColor
AdjustWindowRectEx
SetRect
ClientToScreen
SetWindowsHookExA
RegisterClassA
SystemParametersInfoA
InvalidateRect
GetParent
GetMenuState
TranslateMessage
SetScrollRange
GetIconInfo
GetCursor
InsertMenuA
GetKeyboardLayoutNameA
LoadStringA
EnumWindows
GetCursorPos
SetWindowPlacement
DrawFrameControl
DrawIconEx
ScreenToClient
WindowFromPoint
MessageBoxA
RegisterClipboardFormatA
UpdateWindow
InflateRect
RemovePropA
SetForegroundWindow
SetMenuItemInfoA
TranslateMDISysAccel
GetMenuItemInfoA
GetSysColorBrush
MapVirtualKeyA
CallWindowProcA
DrawIcon
OffsetRect
IsZoomed
GetWindowRect
GetDCEx
DestroyCursor
OemToCharA
SetFocus
DeleteMenu
SetMenu
kernel32
VirtualAlloc
CompareStringA
GetCommandLineW
LocalAlloc
GlobalAddAtomA
InitializeCriticalSection
ResetEvent
LocalReAlloc
ExitProcess
FreeLibrary
MulDiv
GetEnvironmentStrings
IsBadReadPtr
GetCPInfo
GetVersionExA
GetProcAddress
VirtualAllocEx
GetLocalTime
GetACP
ExitThread
GetCommandLineA
GlobalDeleteAtom
LoadLibraryA
HeapAlloc
lstrlenW
GetOEMCP
FindFirstFileA
lstrlenA
GetCurrentThread
lstrcpyA
GetModuleHandleA
GetStringTypeW
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc0 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc7 Size: 1024B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc3 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc5 Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ