haxshcu
Static task
static1
Behavioral task
behavioral1
Sample
fae21567769c9f25116a053172a5452a_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fae21567769c9f25116a053172a5452a_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fae21567769c9f25116a053172a5452a_JaffaCakes118
-
Size
34KB
-
MD5
fae21567769c9f25116a053172a5452a
-
SHA1
503a8ab0dda42d6fec0e4456d7a36f7c0331e360
-
SHA256
cb277f3030965b24ccd11c5769099b6c3916ac4556f41f2a805c1261bc361d9a
-
SHA512
e52945351eb3f65fa90245bd7e471c9877eecd53787dc8935c88ac720452f8649755b75277c16e4cbf47001463dd49d2cb7291c43574afb892701eb6375a1657
-
SSDEEP
768:MrdlZIjVeIXd2GNMW3JNM66brZRtFMyDs:MPZoVeIN2hP66xR0y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fae21567769c9f25116a053172a5452a_JaffaCakes118
Files
-
fae21567769c9f25116a053172a5452a_JaffaCakes118.dll windows:6 windows x86 arch:x86
584828b31de09188c9bf0df75864af7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalLock
GlobalHandle
GlobalUnlock
LocalAlloc
LocalFree
GlobalAlloc
VirtualProtect
GetProcessHeap
GlobalFree
HeapAlloc
wsock32
inet_addr
WSAAsyncGetProtoByNumber
listen
send
connect
bind
ord1104
ord1141
mapi32
ord164
ord44
ord14
ord185
ord34
msi
ord31
ord131
ord145
ord151
ord169
ord117
ord116
wsnmp32
ord402
ord107
ord501
ord604
ord504
avifil32
AVIStreamInfoW
AVIMakeFileFromStreams
AVIFileExit
AVIStreamInfo
msvfw32
StretchDIB
MCIWndCreateA
user32
LoadStringW
MessageBoxW
msvcrt
free
memset
memcpy
malloc
_adjust_fdiv
_initterm
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ