Static task
static1
Behavioral task
behavioral1
Sample
401d68337a3778f492f93b8809a8f700_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
401d68337a3778f492f93b8809a8f700_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
401d68337a3778f492f93b8809a8f700_JaffaCakes118
-
Size
239KB
-
MD5
401d68337a3778f492f93b8809a8f700
-
SHA1
415eb9d15de1d92a66c65a1ca53577d9eabd5b1d
-
SHA256
2ae1eebe75ddefa72d9d715c480caf628778a3328db12aea27e95a358d406cca
-
SHA512
b87af24768868c4d0b406e4986282b567774d98f644202538c73b2e6aa0c85337ef61c54452c7f8b68ae8ad9acf942e35d22b8796040127a9e34aecd87c9b704
-
SSDEEP
6144:36ZFRNFcE7UMprJNEOH8Bm9NATP14Wszt28b:icE7UGFNEufZy8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 401d68337a3778f492f93b8809a8f700_JaffaCakes118
Files
-
401d68337a3778f492f93b8809a8f700_JaffaCakes118.dll windows:4 windows x86 arch:x86
04901f3bdc9cecada545c3aab537ebbe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
TranslateMessage
CallWindowProcA
InvalidateRect
GetFocus
InsertMenuItemA
DrawIcon
ActivateKeyboardLayout
IsWindow
GetSystemMenu
GetMessagePos
GetPropA
DrawFrameControl
IsIconic
SetScrollInfo
FrameRect
GetClassInfoA
MapWindowPoints
LoadCursorA
IsDialogMessageW
DispatchMessageW
OpenClipboard
GetWindowTextA
GetKeyNameTextA
SetWindowLongA
GetCursorPos
ReleaseDC
GetKeyboardLayoutNameA
SystemParametersInfoA
DispatchMessageA
GetMenuState
RegisterWindowMessageA
MoveWindow
SetWindowLongW
GetWindowRect
GetMenuItemID
IsWindowEnabled
OemToCharA
GetSystemMetrics
SendMessageW
GetDC
IsRectEmpty
GetKeyState
DestroyIcon
GetDesktopWindow
GetCursor
GetLastActivePopup
wsprintfA
CreateWindowExA
DestroyWindow
GetMenuItemCount
GetIconInfo
IsWindowUnicode
GetWindowLongA
GetWindowThreadProcessId
GetScrollPos
GetSubMenu
GetMenu
RegisterClassA
AdjustWindowRectEx
CharUpperBuffA
SetClassLongA
MessageBeep
SetCapture
TrackPopupMenu
LoadKeyboardLayoutA
CallNextHookEx
PostQuitMessage
GetDlgItem
GetDCEx
SetScrollPos
DestroyCursor
GetScrollInfo
GetClassLongA
SetParent
DefWindowProcA
UnhookWindowsHookEx
DestroyMenu
PostMessageA
SetWindowsHookExA
InsertMenuA
DefMDIChildProcA
GetWindowLongW
CharNextW
EnableWindow
WaitMessage
FindWindowA
CreateMenu
CharLowerBuffA
GetSysColor
EnumThreadWindows
SetFocus
ShowOwnedPopups
ShowScrollBar
CheckMenuItem
PeekMessageW
GetWindow
IsZoomed
PtInRect
ClientToScreen
FillRect
SetMenuItemInfoA
UnregisterClassA
RegisterClipboardFormatA
ScreenToClient
GetTopWindow
LoadIconA
PeekMessageA
DrawIconEx
GetCapture
CharLowerA
SetTimer
OffsetRect
SetMenu
ScrollWindow
DeleteMenu
GetMenuItemInfoA
IsWindowVisible
CloseClipboard
TranslateMDISysAccel
ChildWindowFromPoint
MsgWaitForMultipleObjects
SetScrollRange
DrawMenuBar
SetWindowTextA
IsChild
CreatePopupMenu
GetScrollRange
ShowWindow
BeginPaint
EnumWindows
SetPropA
ReleaseCapture
GetClientRect
GetSysColorBrush
EmptyClipboard
DrawEdge
MessageBoxA
GetKeyboardLayout
GetMenuStringA
GetKeyboardLayoutList
GetKeyboardType
EnableMenuItem
SetWindowPlacement
DefFrameProcA
UpdateWindow
GetClipboardData
IntersectRect
EqualRect
GetKeyboardState
SetForegroundWindow
GetWindowDC
LoadStringA
KillTimer
GetActiveWindow
GetWindowPlacement
CreateIcon
EndPaint
LoadBitmapA
SetCursor
IsDialogMessageA
WindowFromPoint
EnableScrollBar
DrawTextA
SetWindowPos
CharNextA
DrawAnimatedRects
SetRect
CharToOemA
RemovePropA
GetForegroundWindow
GetClassNameA
SetActiveWindow
SetClipboardData
RedrawWindow
InflateRect
MapVirtualKeyA
SendMessageA
GetParent
kernel32
GetACP
GetProcAddress
lstrlenA
LoadLibraryA
ExitThread
SetLastError
GlobalAlloc
GetModuleHandleA
VirtualAlloc
WriteFile
FreeResource
DeleteCriticalSection
ExitProcess
GetOEMCP
FindFirstFileA
GetUserDefaultLCID
DeleteFileA
version
GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA
Sections
CODE Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 167KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 722B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ