Static task
static1
Behavioral task
behavioral1
Sample
5265b12bc71a7151ca85bfa8866fa819_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5265b12bc71a7151ca85bfa8866fa819_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
5265b12bc71a7151ca85bfa8866fa819_JaffaCakes118
-
Size
199KB
-
MD5
5265b12bc71a7151ca85bfa8866fa819
-
SHA1
95fb78b9fff441347d6aef97745222481bfc65fc
-
SHA256
0ccd30cae82a32e2b18be518bb2bfe733f14af5911d0b5bad977eb183124128f
-
SHA512
bb1d6aaed3c0ae0404a725f0c96fd6d6ba050d48d9053985c4d92f57e026ec57a9fac60cb8c594cd6f7c493abccd2c8c89b736f70e2b24262891706b88e47d3d
-
SSDEEP
3072:qPxhOPmNAwO8dlYNB1aemZyghamzfB1HH2ZC1TTF/DFV9jc1o:OCwhdlUQemZNamLQC1TT5DF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5265b12bc71a7151ca85bfa8866fa819_JaffaCakes118
Files
-
5265b12bc71a7151ca85bfa8866fa819_JaffaCakes118.dll windows:5 windows x86 arch:x86
472550cc76be68d4ecf24a940c5c5c87
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAllocEx
GetWindowsDirectoryW
lstrcatW
CloseHandle
CreateFileW
user32
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
LoadIconA
gdi32
DPtoLP
DeleteColorSpace
DeviceCapabilitiesExW
EnableEUDC
EndDoc
EngAcquireSemaphore
EngCheckAbort
EngCreateClip
EngCreateDeviceBitmap
EngCreateDeviceSurface
EngCreatePalette
EngDeletePath
EngFindResource
EngGetDriverName
EngGradientFill
EngQueryLocalTime
EngReleaseSemaphore
EngTextOut
EnumEnhMetaFile
EudcLoadLinkW
FONTOBJ_cGetGlyphs
FONTOBJ_pxoGetXform
FrameRgn
GdiComment
GdiConvertEnhMetaFile
GdiConvertMetaFilePict
GdiCreateLocalEnhMetaFile
GdiEntry11
GdiEntry2
GdiGetBatchLimit
GdiGetPageHandle
GdiInitializeLanguagePack
GdiPlayDCScript
GdiPlayJournal
GdiSetBatchLimit
GdiSetServerAttr
GdiSwapBuffers
CreatePolygonRgn
GetCharWidthA
GetColorAdjustment
GetEnhMetaFileDescriptionA
GetEnhMetaFileDescriptionW
GetEnhMetaFilePaletteEntries
GetFontData
GetFontLanguageInfo
GetFontUnicodeRanges
GetMapMode
GetMiterLimit
GetObjectA
GetPolyFillMode
GetROP2
GetStretchBltMode
HT_Get8BPPFormatPalette
InvertRgn
LPtoDP
LineTo
OffsetRgn
PATHOBJ_vEnumStart
PlayEnhMetaFileRecord
PolyBezier
PolyDraw
PolyPolyline
PolyTextOutW
PtVisible
RemoveFontResourceExW
ScaleViewportExtEx
SelectClipRgn
SetBrushOrgEx
SetEnhMetaFileBits
SetFontEnumeration
SetMapperFlags
SetPixelFormat
SetPixelV
SetPolyFillMode
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetViewportOrgEx
XLATEOBJ_cGetPalette
CreatePolyPolygonRgn
CreateICW
CreateFontIndirectExA
CreateDiscardableBitmap
CreateDIBitmap
CreateDCW
CreateCompatibleDC
AnimatePalette
CopyMetaFileW
CopyEnhMetaFileW
CloseEnhMetaFile
CLIPOBJ_ppoGetPath
GetBoundsRect
comdlg32
PageSetupDlgW
PageSetupDlgA
PrintDlgA
PrintDlgExA
PrintDlgExW
GetFileTitleA
ReplaceTextW
ReplaceTextA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
PrintDlgW
advapi32
RegOpenKeyExW
RegOpenKeyW
msvcrt
_CIatan
_EH_prolog
_Getdays
_XcptFilter
__RTDynamicCast
__RTtypeid
__argv
__p___argc
__p__amblksiz
__p__dstbias
__p__pctype
__unDNameEx
_adj_fdivr_m32
_adj_fdivr_m32i
_atoi64
_beginthreadex
_cexit
_clearfp
_environ
_execl
_fdopen
_filbuf
_findfirst
_findfirsti64
_findnexti64
_fsopen
_ftime64
_gmtime64
_initterm
_ismbbgraph
_ismbbpunct
_ismbcalnum
_itoa
_ltow
_mbsnbcmp
_mbsnicmp
_mbsninc
_mbsspnp
_onexit
_spawnl
_spawnlp
_stat
_strdup
_strtime
_sys_errlist
_tell
_timezone
_unlock
_waccess
_wcmdln
_wcsdup
_wcsncoll
_wenviron
_wfdopen
_wfreopen
_wgetdcwd
_wmktemp
_wperror
_wpgmptr
_wstati64
_wstrtime
_wsystem
_wtempnam
_wtmpnam
_wtoi64
_yn
acos
atexit
atof
ctime
ferror
fgetwc
fputs
fputws
freopen
getc
getenv
gmtime
isleadbyte
iswprint
iswxdigit
labs
printf
rand
setlocale
signal
sscanf
strchr
strtoul
swscanf
tanh
time
tmpfile
wprintf
Sections
.text Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ