Static task
static1
Behavioral task
behavioral1
Sample
54739f31aaa2059d0c7c19b9d4b8e1fe_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
54739f31aaa2059d0c7c19b9d4b8e1fe_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
54739f31aaa2059d0c7c19b9d4b8e1fe_JaffaCakes118
-
Size
348KB
-
MD5
54739f31aaa2059d0c7c19b9d4b8e1fe
-
SHA1
e07ce07f7e7e78dc4de4d92095a0f06679ba1ed8
-
SHA256
1a33748581e9cd92df5f42622a9da0861b52dee3af800c2db9345983a41a37f2
-
SHA512
587873f9e002e1805518116f9e9241338e936a2437348c0c048077e08a5feab63d33fcd315d9d567831152eebc41c32961258a455a34a3c85fd4b64137062db2
-
SSDEEP
6144:3Z2WedUQ+3juk2rQyBI/Msz1UolMyfhtVV3eHLj5nUhFc9GMYB8:0ndc0QwcMszFlMyfnuHPpUXc95YB8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54739f31aaa2059d0c7c19b9d4b8e1fe_JaffaCakes118
Files
-
54739f31aaa2059d0c7c19b9d4b8e1fe_JaffaCakes118.dll windows:4 windows x86 arch:x86
b8a68bede8a447ff3810ce0318c91bf6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetWindowLongW
GetForegroundWindow
GetKeyNameTextA
GetSystemMenu
GetClipboardData
GetMenuItemInfoA
GetScrollInfo
IsIconic
GetScrollPos
GetWindowLongA
IsZoomed
GetKeyboardType
GetPropA
GetMenuItemCount
GetKeyState
GetWindowTextA
GetParent
GetFocus
GetSysColor
IsWindowUnicode
IsChild
GetWindowDC
GetSysColorBrush
GetKeyboardState
IntersectRect
GetMenuState
GetWindow
GetWindowPlacement
GetDlgItem
kernel32
GetLastError
SetHandleCount
HeapDestroy
GetProcAddress
SizeofResource
WaitForSingleObject
LocalFree
GetCommandLineA
ExitProcess
lstrcatA
VirtualAllocEx
VirtualAlloc
IsBadReadPtr
ReadFile
ResetEvent
MoveFileExA
IsBadHugeReadPtr
SetLastError
LoadLibraryExA
MoveFileA
LoadLibraryA
WideCharToMultiByte
LocalReAlloc
MulDiv
lstrcmpiA
RaiseException
lstrcpynA
GetCommandLineW
LocalAlloc
lstrcmpA
SetErrorMode
GetModuleHandleA
GetOEMCP
VirtualQuery
VirtualFree
gdi32
CreateBitmap
SetPixel
BitBlt
CopyEnhMetaFileA
Sections
CODE Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES35 Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES89 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES65 Size: 512B - Virtual size: 347B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES21 Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES67 Size: 512B - Virtual size: 361B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES75 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES62 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES30 Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 906B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ