Joint
Static task
static1
Behavioral task
behavioral1
Sample
f175c4f5fcf803e8baee55c63fda40d1_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f175c4f5fcf803e8baee55c63fda40d1_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f175c4f5fcf803e8baee55c63fda40d1_JaffaCakes118
-
Size
20KB
-
MD5
f175c4f5fcf803e8baee55c63fda40d1
-
SHA1
dddfda589bcf8a40a060140924ca55c71bf38ae0
-
SHA256
dd96ea96047e889afb2dea0b6d9dba608035fb9fc66442b67cdccea8c72d9b0d
-
SHA512
4cc118b42568c5affb695ae3ff5833748ac7e6b8b428bd43bdbb78695cedc5bd188838d7887845da18b0c30f1d4bc38a3484868136b36fecf9fde12666cbca78
-
SSDEEP
384:MWgm5lOaZ6lJoMS2Fg0bzMZOsSpHWR8wJBBLT+6x1JcUl:MWt5lOgeoMr3bwZKQRNJH/++uUl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f175c4f5fcf803e8baee55c63fda40d1_JaffaCakes118
Files
-
f175c4f5fcf803e8baee55c63fda40d1_JaffaCakes118.dll windows:4 windows x86 arch:x86
5b0337ef3555935778babbf6b4f19117
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeLibrary
ExitThread
GetProcAddress
CreateThread
Sleep
lstrlenA
GlobalAlloc
GetVersionExA
LoadLibraryA
GlobalFree
lstrcmpA
lstrcpynA
GetComputerNameA
CreateMutexA
GetLastError
lstrcatA
lstrcpyA
GetLocalTime
CloseHandle
CreateFileA
ReadFile
WriteFile
DeleteFileA
GetTempFileNameA
GetTempPathA
GetSystemDirectoryA
SetEndOfFile
SetFilePointer
GetProcessTimes
CreateProcessA
Process32Next
Process32First
CreateToolhelp32Snapshot
LocalFree
FormatMessageA
user32
wvsprintfA
wsprintfA
CharLowerA
wsock32
recv
socket
closesocket
htons
send
setsockopt
connect
gethostbyaddr
inet_addr
WSAStartup
gethostname
WSACleanup
gethostbyname
advapi32
RegCloseKey
RegQueryValueExA
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
ole32
CoCreateGuid
Exports
Exports
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ