?Dll1Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
fabf8317994442f4f43060b86200ecfa_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fabf8317994442f4f43060b86200ecfa_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fabf8317994442f4f43060b86200ecfa_JaffaCakes118
-
Size
68KB
-
MD5
fabf8317994442f4f43060b86200ecfa
-
SHA1
3b67a959ff8ff53c7807c6aab7bb4be71e4bada5
-
SHA256
2a23b25d32aff013d5d78e788c10e87035c890734a16ea47adf6fdd41bd95c60
-
SHA512
c43f72e303c199d0cb446c41ae11310ec0ea23d538009c6d36869225fc05e901908be73c2038e3f4fa7316bb9c020431b391daaf7c0b937b17f740ab12f9350a
-
SSDEEP
768:rzXSht/KQFskxsXyTRR+BLAqo5nDOkyGbh2jTDXgTHiY9OKSWQCdktqvuA:sBKQFskdT3+BLAqmPAjYLhnSBCmA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fabf8317994442f4f43060b86200ecfa_JaffaCakes118
Files
-
fabf8317994442f4f43060b86200ecfa_JaffaCakes118.dll windows:4 windows x86 arch:x86
0a338cebd9eee779203643c1a1267859
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
msvcrt
strtol
sscanf
fopen
fseek
ftell
fgetc
fread
fclose
memcpy
memset
time
sprintf
strcmp
strtok
strstr
strcat
printf
strcpy
strlen
kernel32
FreeLibrary
LocalAlloc
lstrcmpiA
CreateToolhelp32Snapshot
Process32First
Process32Next
TerminateProcess
OpenProcess
VirtualAllocEx
WriteProcessMemory
GetModuleHandleA
CreateRemoteThread
GetVersionExA
lstrcmpA
GetModuleFileNameA
Sleep
SetSystemTime
GetSystemTime
CloseHandle
GetFileSize
CreateFileA
WinExec
lstrcpyA
GetFileAttributesA
lstrcatA
GetSystemDirectoryA
lstrlenA
DeleteFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
CreateThread
GetProcAddress
LoadLibraryA
WriteFile
user32
GetWindowTextA
GetClassNameA
EnumWindows
SendMessageA
wsprintfA
CharUpperA
FindWindowExA
PostMessageA
ShowWindow
GetWindow
advapi32
CloseServiceHandle
QueryServiceConfigA
ChangeServiceConfigA
OpenServiceA
QueryServiceStatus
ControlService
DeleteService
OpenSCManagerA
CreateServiceA
LookupAccountSidA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
GetTokenInformation
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ole32
CoCreateGuid
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ