chadti
Static task
static1
Behavioral task
behavioral1
Sample
ff1662b9de732e8ed19a9f616c76e1fc_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff1662b9de732e8ed19a9f616c76e1fc_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
ff1662b9de732e8ed19a9f616c76e1fc_JaffaCakes118
-
Size
12KB
-
MD5
ff1662b9de732e8ed19a9f616c76e1fc
-
SHA1
08e91608d2dcb8b61dbf7bce3167a68e4d346cb6
-
SHA256
051478d3c8f13bf2eaa0345fb3f91eaf413c668c5a842e1a6d57bf6280d49ca4
-
SHA512
fb7efde2b1a0c3eb3f1408618ead7c5c34c463838eac24cd747da5b77172a6f4a03ed69442746a2f52192a03f0e77ed326f5acbc11dd1dd9ef2da1e4a6fbdd51
-
SSDEEP
192:FfpYvGFRrtbM8/lPh3qOaD9xOLaajZc+cfkgL7mmv7:zYvUVq8LqXRxKc+cM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff1662b9de732e8ed19a9f616c76e1fc_JaffaCakes118
Files
-
ff1662b9de732e8ed19a9f616c76e1fc_JaffaCakes118.dll windows:4 windows x86 arch:x86
de61f2d5819e065657f08cfaf2f45964
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ReplyMessage
CallWindowProcW
wsprintfA
GetInputDesktop
GetAltTabInfoA
AnimateWindow
RegisterClassExW
kernel32
lstrlenA
CloseHandle
ExitProcess
ExitThread
FlushViewOfFile
GetProcessHeaps
GetSystemTime
GetTickCount
LoadLibraryA
LoadLibraryExA
OpenMutexA
lstrcmpiA
RtlMoveMemory
SetSystemPowerState
Sleep
SystemTimeToFileTime
WriteFileEx
WriteTapemark
lstrcatA
advapi32
GetFileSecurityA
GetSecurityInfo
GetMultipleTrusteeOperationA
GetMultipleTrusteeA
GetLengthSid
gdi32
GetROP2
GetWindowOrgEx
GetPolyFillMode
GetPixelFormat
GetPixel
GetPath
GetPaletteEntries
RealizePalette
ws2_32
socket
setsockopt
recv
connect
ntdll
RtlGetAce
RtlFreeHeap
RtlFreeHandle
RtlFormatMessage
NtPulseEvent
NtCreateTimer
NtCreateNamedPipeFile
NtCreateEvent
NtCancelTimer
NtCancelIoFile
NtCallbackReturn
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 946B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ