Static task
static1
Behavioral task
behavioral1
Sample
f0053f94309732c10c60812e8629e858_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f0053f94309732c10c60812e8629e858_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f0053f94309732c10c60812e8629e858_JaffaCakes118
-
Size
29KB
-
MD5
f0053f94309732c10c60812e8629e858
-
SHA1
98d104f6904a77b78680f107b531397c9014a2d2
-
SHA256
732e273d6a305b47e0d9a4deb110b995582cb6a78026e4103c8f465ac8305ec8
-
SHA512
57e4e19b28006750a442947768109c63068d85891963b601a6cbc002bc79d04c61bb80a360c8c0869dff2aa626d177ce05f0a975612064e9adce7bc0e36c7980
-
SSDEEP
768:8ObUH3mOfl2t2Jq1aaKIXZJXZ9M2au8uaUQTgZpMt2:8ObUHp2t2JSVKIpJPMBfTKG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0053f94309732c10c60812e8629e858_JaffaCakes118
Files
-
f0053f94309732c10c60812e8629e858_JaffaCakes118.dll windows:4 windows x86 arch:x86
e4006b9ff818fe63c6d5d2bbae1a0c0e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wininet
HttpQueryInfoA
HttpSendRequestA
InternetReadFile
InternetOpenUrlA
InternetCrackUrlA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
user32
EnumWindows
GetWindowLongA
GetWindowThreadProcessId
wsprintfA
GetWindowTextA
ws2_32
inet_ntoa
closesocket
msvcrt
_adjust_fdiv
malloc
_initterm
free
??2@YAPAXI@Z
??3@YAXPAX@Z
sscanf
memcpy
memset
memcmp
isalnum
kernel32
GetCommandLineA
IsBadReadPtr
GetCurrentProcessId
GetPrivateProfileStringA
lstrcmpA
lstrlenW
WideCharToMultiByte
lstrcpyA
GetCurrentProcess
VirtualQueryEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
lstrcpynA
Sleep
ExitProcess
lstrcatA
lstrcmpiA
CreateFileA
GetFileSize
GlobalAlloc
GetModuleFileNameA
ReadFile
GlobalFree
lstrlenA
GetModuleHandleA
GetProcAddress
CreateThread
CloseHandle
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ