Static task
static1
Behavioral task
behavioral1
Sample
f0203b6375600a6225de2839d732db77_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0203b6375600a6225de2839d732db77_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f0203b6375600a6225de2839d732db77_JaffaCakes118
-
Size
32KB
-
MD5
f0203b6375600a6225de2839d732db77
-
SHA1
84d15fa43476b9ff8eaf34f4133ad108768d76d5
-
SHA256
66a23e1e5c8774bd534bc6c652802a1cb9be6fbdc62daef15df1df219d185085
-
SHA512
cb93aa7707f5836790f7d1e6413bafcd7c99f07dd6a578a22cada8cb9acac548f00481c26f4e2abeb4eba996acf0860898a0814e53236a835256b5162990a7d2
-
SSDEEP
384:f8UJWfcJSbjTlT+UJMiTJvbQB8feYCg+:6fcJSnTlTpJFTVbjfe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0203b6375600a6225de2839d732db77_JaffaCakes118
Files
-
f0203b6375600a6225de2839d732db77_JaffaCakes118.dll windows:4 windows x86 arch:x86
239bfdeaa78e09ee2944a65ec04c73b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
ntohs
ntohl
closesocket
msvcrt
memcmp
free
_initterm
atoi
_adjust_fdiv
_strupr
memcpy
strcmp
fwrite
time
strrchr
fopen
fseek
ftell
??2@YAPAXI@Z
memset
fread
fclose
strstr
strchr
strncpy
??3@YAXPAX@Z
_strlwr
_itoa
malloc
kernel32
CreateEventA
lstrcmpA
WaitForSingleObject
SetEvent
CreateThread
GetModuleHandleA
LoadLibraryA
CopyFileA
GetProcAddress
GetTempPathA
WideCharToMultiByte
lstrcpyA
lstrlenA
ReadProcessMemory
lstrcatA
GetCurrentProcessId
GetCurrentProcess
VirtualProtectEx
GetModuleFileNameA
Sleep
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ