jakxqyqa
Static task
static1
Behavioral task
behavioral1
Sample
fe76b0ef249aebd98f82d6437721c047_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe76b0ef249aebd98f82d6437721c047_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fe76b0ef249aebd98f82d6437721c047_JaffaCakes118
-
Size
38KB
-
MD5
fe76b0ef249aebd98f82d6437721c047
-
SHA1
b1d40595e05da9c6f8627885b36177d4ecd54f21
-
SHA256
39724fa50de7a8937dec84a3f00fe23c9dea895d312bdce8133db18f15ee1a81
-
SHA512
abff3bc26f23c3c864bca8bb4ef1191278bb88bf5d604db949a822fc98525bcecdc21acceffbca1aae5557c8a13e9e15092837bc1c16b3ec2d03c6b3fc8fd725
-
SSDEEP
384:429M1kCo19eJhv2BqFKrtR1836QF0q5knzxRCT+7BoY3Vq5b1520IVXOFCfl:4rQ19eJhDFKJ7arF0gkpoY3w5baVMA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe76b0ef249aebd98f82d6437721c047_JaffaCakes118
Files
-
fe76b0ef249aebd98f82d6437721c047_JaffaCakes118.dll windows:6 windows x86 arch:x86
b5951da1707acb05613dea4d0702909f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateHardLinkW
GetCPInfo
GetProcessHeap
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalUnlock
HeapAlloc
LocalAlloc
LocalFree
OpenFileMappingA
ReadFileEx
VirtualProtect
user32
CallMsgFilterA
CharToOemW
DefDlgProcW
GetClassInfoA
GetClassInfoW
GetMessagePos
LoadStringW
MessageBoxW
winspool.drv
DeletePortW
DeviceCapabilities
EnumJobsA
ord210
GetFormW
OpenPrinterA
SeekPrinter
SetJobW
loadperf
LoadPerfCounterTextStringsA
LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
avifil32
AVIFileOpenA
AVIFileOpenW
AVIStreamLength
CreateEditableStream
EditStreamSetName
EditStreamSetNameA
msvfw32
ICDraw
ws2_32
WSARecv
WSARemoveServiceClass
WSAStartup
WSAWaitForMultipleEvents
gethostbyaddr
gethostbyname
recv
msvcrt
_adjust_fdiv
_initterm
free
malloc
memcpy
memset
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ