ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
732688ea6141e5acdb2f6d21042770c0_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
732688ea6141e5acdb2f6d21042770c0_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
732688ea6141e5acdb2f6d21042770c0_JaffaCakes118
-
Size
31KB
-
MD5
732688ea6141e5acdb2f6d21042770c0
-
SHA1
64763c3bd94bfb383e2458dc7c92cdcc2bdd4536
-
SHA256
899a8f17a0630505acf518fd78b60ececb81def58598e51ce6117563e341ec2c
-
SHA512
46639f2f461493adde8bbaa5812c9c09785b0d73bb0af73d544c935b9c8b47ba7050492a4c9f6df031c0daffed945294240050c5aab63ba72ae7ae0332f4a2d7
-
SSDEEP
768:OdRvYFqp0K/Zk8sTPPTMjseI3G8Co3/oCly7DD:wAqtk8ws4Co3RlW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 732688ea6141e5acdb2f6d21042770c0_JaffaCakes118
Files
-
732688ea6141e5acdb2f6d21042770c0_JaffaCakes118.dll windows:6 windows x86 arch:x86
ead2e48603bc089608270e941c3bda66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
free
activeds
ord15
adsldpc
ADSIOpenDSObject
advapi32
RegOpenKeyW
mprapi
MprConfigServerConnect
netapi32
DsGetDcNameW
ntdll
NtClose
ole32
CoUninitialize
rasapi32
RasDeleteEntryW
rpcrt4
NdrServerCall2
rtutils
LogErrorW
secur32
GetComputerObjectNameW
user32
RegisterDeviceNotificationW
netshell
NcFreeNetconProperties
Exports
Exports
Sections
.MPRESS1 Size: 25KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE