Static task
static1
Behavioral task
behavioral1
Sample
5651aa11bf10475e23c049f3c61f6dd1_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
5651aa11bf10475e23c049f3c61f6dd1_JaffaCakes118
-
Size
116KB
-
MD5
5651aa11bf10475e23c049f3c61f6dd1
-
SHA1
4e1f5b15668dcc25434d469d2d308f1b2fc95358
-
SHA256
bc495ccdb5013fe9cdfbf8c14979d40e7f17d0e07e17728b9891f4bfa9ab01c4
-
SHA512
8d5709cffceaf89fdce9c4cecaca27420e8ad53b0021bcc209fc08cb188e278323d9268e9d83493aa092267fde26586d518f3ef19eeb29e7727a9321f8586cd7
-
SSDEEP
1536:/1S8qxAOaxPsNp92pErNb4NhuLaQHUH3+EZgyB2S9zeRaNHz0gN1syNFC2Sh:9SqOIkND2pEACa8UuOgUARYT0KC2Sh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5651aa11bf10475e23c049f3c61f6dd1_JaffaCakes118
Files
-
5651aa11bf10475e23c049f3c61f6dd1_JaffaCakes118.dll windows:5 windows x86 arch:x86
62de28aecb81f9c9ba66d5a5bf6a898e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetStringTypeExA
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
GetWindowsDirectoryA
HeapAlloc
HeapFree
EnterCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LCMapStringW
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetEvent
SetLastError
SetUnhandledExceptionFilter
SwitchToThread
TerminateProcess
UnhandledExceptionFilter
lstrlenW
DeleteCriticalSection
CreateEventA
CompareStringA
CloseHandle
VirtualAlloc
GetStartupInfoW
LoadLibraryExA
HeapReAlloc
GetProcAddress
user32
DispatchMessageA
EnumWindows
FindWindowExA
GetDlgCtrlID
GetDlgItemTextW
GetMessageA
GetWindowLongA
GetWindowThreadProcessId
IsDialogMessageA
IsWindow
MessageBoxA
PeekMessageA
SetWindowLongA
TranslateMessage
LoadIconA
LoadCursorA
CheckDlgButton
GetDlgItem
EnableWindow
LoadCursorW
LoadIconW
GetSysColor
DestroyWindow
advapi32
AdjustTokenPrivileges
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
msvcrt
memset
_XcptFilter
__CxxFrameHandler
_c_exit
_cexit
_exit
_finite
_mbsinc
_snprintf
_vsnprintf
_wtol
atoi
atol
isspace
iswspace
mbstowcs
qsort
setlocale
sprintf
sscanf
strchr
strstr
swprintf
wcscat
wcschr
wcscpy
wcscspn
wcslen
wcsncpy
wcstombs
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ