mMektgeocXuzopKBvGfxzbTgBnT
Static task
static1
Behavioral task
behavioral1
Sample
5c742d4f640e75f3331d7be629420f1b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5c742d4f640e75f3331d7be629420f1b_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
5c742d4f640e75f3331d7be629420f1b_JaffaCakes118
-
Size
16KB
-
MD5
5c742d4f640e75f3331d7be629420f1b
-
SHA1
31f2cf235c1b0c2bb16cdf13bbbed459b532dd75
-
SHA256
5835bbfdbcc2d6a496f784f612e4e168436551cc7f2f5105a6a2f7e6960f9b0e
-
SHA512
aa31352e302fd80707ce4249169acf13691b0dc11a8006bd191c818ebbfcfa81037677a602b1564b9f5fc169771d3ca2ead16577eafd5fc00277d5b9f3616565
-
SSDEEP
192:8Y1NPjG5EucJO7B2X7OAZmrdKBwNQqndizMB9GfkKyf9kpV8dji7:8UK5Eucs7SiAYrdtQqddGflp2Nq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c742d4f640e75f3331d7be629420f1b_JaffaCakes118
Files
-
5c742d4f640e75f3331d7be629420f1b_JaffaCakes118.dll windows:5 windows x86 arch:x86
e72dbd419d4b598e5964afda82266089
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CloseHandle
CreateEventA
InitializeCriticalSection
GetCurrentProcessId
lstrlenA
GetTickCount
Sleep
HeapFree
VirtualAlloc
HeapReAlloc
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
CreateThread
wininet
InternetSetOptionA
InternetOpenA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetQueryOptionA
InternetReadFile
InternetConnectA
InternetCloseHandle
iphlpapi
GetAdaptersInfo
urlmon
ObtainUserAgentString
advapi32
SystemFunction036
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 477B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ