SystemService
Static task
static1
Behavioral task
behavioral1
Sample
fff0517b5e11379f252ed5cd597dd75b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fff0517b5e11379f252ed5cd597dd75b_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fff0517b5e11379f252ed5cd597dd75b_JaffaCakes118
-
Size
336KB
-
MD5
fff0517b5e11379f252ed5cd597dd75b
-
SHA1
dd21b38703f243ece444bcdb8d12df3ac2a95c2c
-
SHA256
769d76d7ea7405b5665429e4c8cf85c6a9644dd9b2f4e983bd500d1156f85e22
-
SHA512
48b7d8bd25926366d0a5a88c95eae14823813593b6c2d75efb0b199000710700d5b8ec6e06c577538a3e6f0611a388d13befbf28bf49e6075d6e942f9d25200d
-
SSDEEP
6144:AEQdOPx0GB6s0NQsB3CaBxQl7/B5LtqOhHt:AEg0BB6s6SaBxu5BqOhHt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fff0517b5e11379f252ed5cd597dd75b_JaffaCakes118
Files
-
fff0517b5e11379f252ed5cd597dd75b_JaffaCakes118.dll windows:4 windows x64 arch:x64
9241099284fc9d96fa2c79e30eb61de7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
FreeLibrary
GetTimeFormatW
LoadLibraryA
lstrcpynA
GetLastError
DeactivateActCtx
GetSystemTime
LocalAlloc
RaiseException
secur32
QueryContextAttributesW
SealMessage
UnsealMessage
QueryContextAttributesA
glu32
gluQuadricTexture
gluOrtho2D
gluNurbsCallback
gluNurbsCurve
gluPartialDisk
gluTessCallback
gluQuadricCallback
gluPerspective
gluNewQuadric
gluTessBeginContour
gluGetString
gluScaleImage
gluQuadricNormals
gluBeginTrim
schannel
SpUserModeInitialize
SslGetMaximumKeySize
SpLsaModeInitialize
SslCrackCertificate
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ