Activate
Static task
static1
Behavioral task
behavioral1
Sample
e7e551c6b18f37238c049fdd4afbb876_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7e551c6b18f37238c049fdd4afbb876_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e7e551c6b18f37238c049fdd4afbb876_JaffaCakes118
-
Size
32KB
-
MD5
e7e551c6b18f37238c049fdd4afbb876
-
SHA1
dc5b92b877b9133fb560ee2ed0c0e63b194a38d2
-
SHA256
a5047658afa83fe3a35a444a5240d09d4e3449fbd85a1520bd3a9dd3fa5721df
-
SHA512
f282618d516b90f8f920ca920bb8a17de0164fb3275be83634024fc56fbc01eeb81503681f053e4072d64fae82005a243492b60c225c0d99e045efa9542eaa66
-
SSDEEP
768:X8Cnq/xdcRpNLdNRpf5BlVo5sQj837xkqODPOjczjINr8ghyfUCD6:vMxdcRpNLdNRpf5BlVqsQsdORIs7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7e551c6b18f37238c049fdd4afbb876_JaffaCakes118
Files
-
e7e551c6b18f37238c049fdd4afbb876_JaffaCakes118.dll windows:4 windows x86 arch:x86
7e965586302b15135eb058a8c79d3df4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
inet_addr
gethostbyname
kernel32
CreateFileW
LocalAlloc
lstrcpyA
lstrcatA
GetComputerNameA
CloseHandle
WaitForSingleObject
CreateEventA
lstrlenA
GetTempPathA
lstrcmpiA
lstrcpynA
GlobalFree
GlobalAlloc
lstrcmpA
DeleteFileA
LocalFree
WriteFile
CreateFileA
LoadLibraryA
GetLastError
GetTickCount
RtlUnwind
FindFirstFileA
FindNextFileA
MoveFileA
ExitProcess
CreateThread
GetModuleFileNameA
VirtualFree
VirtualAlloc
VirtualQuery
FreeLibrary
SetEvent
OpenEventA
MultiByteToWideChar
GetVersionExA
GetModuleHandleA
GetProcAddress
GetTempFileNameA
FindClose
user32
SendMessageA
EnumWindows
GetWindowThreadProcessId
PostMessageA
CharLowerA
wsprintfA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegCreateKeyA
RegEnumValueA
RegSetValueExA
RegQueryValueExA
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ