Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_949e82d04b852e8aee5eed414e94f0bb.dll
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_949e82d04b852e8aee5eed414e94f0bb
-
Size
408KB
-
MD5
949e82d04b852e8aee5eed414e94f0bb
-
SHA1
b2b36085e51599ba638e55672fb443f2f24a463d
-
SHA256
b25f64090144f614f5f58aa3a73c4c49f1d66f6923b3e13db71929e3f4ed9f59
-
SHA512
cf8aa446c92377106ad18e0e6be396a1e662c95358618be3adfd42fd14c6543999df80e442958b40060906abeefd62fc8bcf9ab9c9a13944773f2182261ba1ad
-
SSDEEP
12288:4jt/ZlYzcVdYBkp6WDujLoyKysXAkvvFvL4qGoAYTXauy:agcPek44ufbKysXAkvvFvL4qGoAYTXau
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_949e82d04b852e8aee5eed414e94f0bb
Files
-
JaffaCakes118_949e82d04b852e8aee5eed414e94f0bb.dll windows:4 windows x86 arch:x86
2480719d1b1f9bffcf6884e165ed2be6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
GetKeyboardLayoutList
GetDC
GetMenuCheckMarkDimensions
GetMonitorInfoA
GetSysColor
GetSystemMetrics
ReleaseDC
SystemParametersInfoA
GetKeyboardLayout
EnumDisplayMonitors
kernel32
GetShortPathNameA
GetStringTypeExW
GetSystemDefaultLCID
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempPathW
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVersionExW
GlobalAlloc
GlobalFree
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSize
HeapUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameA
InterlockedExchange
IsDBCSLeadByte
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MultiByteToWideChar
OpenMutexA
OutputDebugStringA
QueryPerformanceCounter
GetProcessTimes
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryW
SetFileAttributesW
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
GetLocalTime
GetLastError
GetFileType
GetFileAttributesW
GetDiskFreeSpaceExW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
FormatMessageW
FindNextFileW
FindFirstFileW
FindClose
ExpandEnvironmentStringsW
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
CreateSemaphoreA
CreateMutexA
CreateFileW
CreateDirectoryW
CompareStringW
CloseHandle
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleHandleA
RaiseException
GetModuleFileNameW
InterlockedCompareExchange
advapi32
SetSecurityDescriptorDacl
AddAccessDeniedAce
RegisterTraceGuidsA
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
UnregisterTraceGuids
TraceEvent
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
IsValidSid
InitializeSecurityDescriptor
InitializeAcl
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
GetTokenInformation
GetSecurityDescriptorDacl
GetLengthSid
FreeSid
CopySid
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidA
CheckTokenMembership
AllocateAndInitializeSid
AddAccessAllowedAce
ole32
CoTaskMemAlloc
CoTaskMemFree
shlwapi
SHDeleteKeyW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
rpcrt4
UuidCreate
shell32
SHGetSpecialFolderPathW
gdi32
DeleteObject
DeleteDC
CreateSolidBrush
CreateDCA
GetDeviceCaps
dbghelp
ImageRvaToVa
FindExecutableImage
GetTimestampForLoadedLibrary
ImageRvaToSection
FindExecutableImageEx
ImagehlpApiVersion
dsound
ord9
Sections
.text Size: 332KB - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ