UnregisterDriveChangeCallback
Static task
static1
Behavioral task
behavioral1
Sample
42e14c1c7060e2b962f3c4066b1aad88_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42e14c1c7060e2b962f3c4066b1aad88_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
42e14c1c7060e2b962f3c4066b1aad88_JaffaCakes118
-
Size
212KB
-
MD5
42e14c1c7060e2b962f3c4066b1aad88
-
SHA1
c634446e863c1c4bb29d2839ea7ed9672eef8832
-
SHA256
66efd21cd3d06426617b0afabf3baca520ec9de56f2842c8383d8e74b6951af3
-
SHA512
d3ed66f92d5f2f1491a63b447750da081bd78787f1f1ecf22fe55dbd8116ab683540fa3820516f5b2d783ecfe5b11b49a8c8b38f1369cbfa6e89e381441bbbcd
-
SSDEEP
6144:GmJfCkTl+wLtd9l3aULisJEFvLOCNxr+yq5X2Np:Gm5Ck3LtdDdPEZLNxrx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42e14c1c7060e2b962f3c4066b1aad88_JaffaCakes118
Files
-
42e14c1c7060e2b962f3c4066b1aad88_JaffaCakes118.dll windows:4 windows x86 arch:x86
5e822029a3e3819c19fc355ea5885dac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileMappingA
DeleteCriticalSection
ExitProcess
ExitThread
FileTimeToSystemTime
GetCommandLineA
GetConsoleOutputCP
GetEnvironmentStringsA
GetEnvironmentVariableA
GetModuleHandleA
GetStringTypeA
GetStringTypeW
GetTickCount
GetTimeFormatA
GetVersionExA
GlobalReAlloc
HeapAlloc
HeapCreate
HeapSize
InterlockedExchange
IsBadStringPtrA
PulseEvent
QueryPerformanceCounter
ReadProcessMemory
SetConsoleCtrlHandler
SetEvent
SetThreadAffinityMask
TlsGetValue
VirtualAlloc
lstrcatA
lstrcpyA
advapi32
AddAce
CloseServiceHandle
ElfBackupEventLogFileW
ElfReportEventA
EqualDomainSid
GetAuditedPermissionsFromAclA
QueryAllTracesA
QueryServiceStatusEx
RegSetKeySecurity
user32
SetWindowLongA
RegisterWindowMessageA
RedrawWindow
PeekMessageA
OpenClipboard
IsZoomed
GetDlgItemTextA
GetClientRect
EndDeferWindowPos
EnableWindow
EmptyClipboard
ClientToScreen
AppendMenuA
ole32
IsEqualGUID
CreateFileMoniker
CoCreateInstance
ddraw
GetSurfaceFromDC
GetDDSurfaceLocal
DirectDrawEnumerateA
DirectDrawCreateEx
DirectDrawCreateClipper
DirectDrawCreate
DSoundHelp
DDInternalUnlock
DDInternalLock
Exports
Exports
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ