LaunchKwHelper
Static task
static1
Behavioral task
behavioral1
Sample
8ad6bf043a24254b4491df761315ea3a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ad6bf043a24254b4491df761315ea3a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
8ad6bf043a24254b4491df761315ea3a_JaffaCakes118
-
Size
37KB
-
MD5
8ad6bf043a24254b4491df761315ea3a
-
SHA1
825685b015a282454ec9a1fe47ece28baaa2d2ea
-
SHA256
486b43d7d612badb4ed128bbf877ce50b9fdf199b983ffc9cddfd55ca2d362a9
-
SHA512
3f9cf8fa2c20b024878586fc525c64601832edee0f3ad98f57a268d742858fde590eee17f0f8428abea4a220c06262c559f655fc97097e9b41d9df4b46c20cf2
-
SSDEEP
768:/p3V7Wcw1q1h8lx6o0Gw22TL7uMsXLOJfstDp1R7DyAL:99UEslJsTLKMuwstDYa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ad6bf043a24254b4491df761315ea3a_JaffaCakes118
Files
-
8ad6bf043a24254b4491df761315ea3a_JaffaCakes118.dll windows:5 windows x86 arch:x86
3f386f6c8d33c5b9c68b431173443b1a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
FindWindowA
advapi32
RegCloseKey
shell32
SHGetSpecialFolderPathA
shlwapi
PathIsURLA
wininet
InternetOpenA
Exports
Exports
Sections
.MPRESS1 Size: 31KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE