Static task
static1
Behavioral task
behavioral1
Sample
fdfd2d2342b9ba047ce29cf50662d1ed_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fdfd2d2342b9ba047ce29cf50662d1ed_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fdfd2d2342b9ba047ce29cf50662d1ed_JaffaCakes118
-
Size
96KB
-
MD5
fdfd2d2342b9ba047ce29cf50662d1ed
-
SHA1
42c1678f23131bf064eb8f6ddf1708d6503a8600
-
SHA256
78148420128bbc1b1a5d83b594985b943db36e5f4e092e2e7363b0a4fad537d6
-
SHA512
3d5b27d942d6034cc79ae307326ee76d8f593a62974a06a4eabbec7c0d2454a511c785c9de15dc11e0cb2955a44fecb29a62f99b6a7671e9f2eaf4e7c536133a
-
SSDEEP
1536:6U+wLcOhI2JzTTmwT0GuIHC6/Y6fGqt/jg:6UGuhwivYqt/jg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdfd2d2342b9ba047ce29cf50662d1ed_JaffaCakes118
Files
-
fdfd2d2342b9ba047ce29cf50662d1ed_JaffaCakes118.dll windows:4 windows x86 arch:x86
2fa6b9e85f55dceb18ad385532300d57
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteFileA
Sleep
LoadLibraryA
LoadLibraryW
GetProcAddress
GetModuleHandleA
lstrcpynA
GetLastError
GetSystemDefaultLangID
CloseHandle
GetTempPathA
GetCurrentProcess
GlobalFree
GlobalAlloc
GetVersionExA
GlobalMemoryStatus
WideCharToMultiByte
MultiByteToWideChar
ExpandEnvironmentStringsA
OutputDebugStringA
DisableThreadLibraryCalls
CreateThread
lstrcpyA
MoveFileExA
TerminateProcess
ExitProcess
CompareStringW
CompareStringA
SetEndOfFile
GetStringTypeW
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
WriteFile
ReadFile
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
CreateFileA
GetStringTypeA
SetEnvironmentVariableA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
shell32
DoEnvironmentSubstA
shlwapi
PathFileExistsA
iphlpapi
GetAdaptersInfo
ws2_32
inet_ntoa
inet_addr
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ