service
Static task
static1
Behavioral task
behavioral1
Sample
eaef96054fab972c478440a347ec1d23_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
eaef96054fab972c478440a347ec1d23_JaffaCakes118.dll
Resource
win10v2004-20231215-en
General
-
Target
eaef96054fab972c478440a347ec1d23_JaffaCakes118
-
Size
20KB
-
MD5
eaef96054fab972c478440a347ec1d23
-
SHA1
9bed37896775e2b3ed0eb0365a7e7cd26a174795
-
SHA256
c85e4761b4e0aada845e4900d6bdec3317764046edd477e4d34828d380979d3f
-
SHA512
61580c6b6b8428fae3cb80ba2d08c2d60ca0c6042d7f49b9a452559c20cda8d406ec259a41453c1f932f003b39f5fd8ab7bdef73593b6b3756f2fa8966c94538
-
SSDEEP
384:Okki4SNDIOKq7J8/8faqbdELKzHjA4yvBDfr2ho9QbOVQ:BySlIqykCVLKzDA4shfqho9QbOVQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaef96054fab972c478440a347ec1d23_JaffaCakes118
Files
-
eaef96054fab972c478440a347ec1d23_JaffaCakes118.dll windows:4 windows x86 arch:x86
f3711ccfdd16e5afed7df8fdee1f97c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_CxxThrowException
__CxxFrameHandler
fopen
wcscmp
strchr
fclose
strrchr
time
strstr
isdigit
??1type_info@@UAE@XZ
isspace
shlwapi
SHGetValueA
SHSetValueA
wininet
InternetCheckConnectionA
InternetCrackUrlA
InternetSetOptionA
kernel32
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
lstrlenA
lstrlenW
WideCharToMultiByte
RtlUnwind
GetCurrentProcessId
Sleep
DisableThreadLibraryCalls
GetModuleFileNameA
CreateFileA
GetTickCount
CreateThread
CloseHandle
ReadFile
SetFilePointer
GetFileSize
user32
wvsprintfA
GetForegroundWindow
GetMessageA
TranslateMessage
GetActiveWindow
DispatchMessageA
ole32
CoCreateInstance
CoInitialize
oleaut32
SysAllocStringLen
VariantClear
SysAllocString
SysFreeString
Exports
Exports
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ