wbnueua
Static task
static1
Behavioral task
behavioral1
Sample
e97550717863850cc44a8cfba875ffe8_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e97550717863850cc44a8cfba875ffe8_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e97550717863850cc44a8cfba875ffe8_JaffaCakes118
-
Size
30KB
-
MD5
e97550717863850cc44a8cfba875ffe8
-
SHA1
d2e25d38001ab2d59899ad246b0d53d680bdccd7
-
SHA256
5691ae6b748da71b1c673deda285f016043bf7a008c5dd83d9e502ef34ce80ac
-
SHA512
3b13268d507927d12a77042a59d0d882c7c28d055f186a537c708c457b3175c3c9eee34b9c11daefafd7aa6523aa066e256b941e3c1dc7e84ea69100f64244b7
-
SSDEEP
384:GsGZxReWCr/W4gXezSyswci/+9YF8V1qQKZQyF16xj2NhBEHZD24ooaBtK8cKZ5E:Jiyszi/iXqQ9yD6F2vBEMjf+iUZTx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e97550717863850cc44a8cfba875ffe8_JaffaCakes118
Files
-
e97550717863850cc44a8cfba875ffe8_JaffaCakes118.dll windows:6 windows x86 arch:x86
4c4cc802babd24371a2dd9b2d87ed803
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
setupapi
SetupDiCreateDevRegKeyA
SetupDiGetDeviceInstallParamsA
SetupGetLineByIndexA
mswsock
GetAddressByNameW
rresvport
pdh
PdhGetDefaultPerfCounterA
PdhParseCounterPathW
urlmon
BindAsyncMoniker
RevokeBindStatusCallback
WriteHitLogging
mpr
WNetAddConnection2A
WNetAddConnection3A
WNetCancelConnection2A
WNetEnumResourceA
WNetEnumResourceW
WNetGetResourceParentW
WNetGetUserA
WNetGetUserW
winmm
WOWAppExit
aux32Message
midiInGetID
midiOutUnprepareHeader
kernel32
CloseHandle
CopyFileW
CreateFileW
DeleteFileW
EnumSystemCodePagesW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
GetFileSize
GetLastError
GetProcessHeap
GetSystemDirectoryW
HeapAlloc
HeapFree
HeapReAlloc
MultiByteToWideChar
ReadFile
SetLastError
WideCharToMultiByte
lstrcatA
lstrcatW
lstrcpyA
lstrcpyW
lstrlenA
lstrlenW
advapi32
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
msvcrt
_adjust_fdiv
_initterm
free
malloc
memcpy
memset
swprintf
wcscmp
Exports
Exports
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ