mainFunction
Static task
static1
Behavioral task
behavioral1
Sample
9d21b84ec971c46e36e82ac67eb2ce8a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9d21b84ec971c46e36e82ac67eb2ce8a_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
9d21b84ec971c46e36e82ac67eb2ce8a_JaffaCakes118
-
Size
790KB
-
MD5
9d21b84ec971c46e36e82ac67eb2ce8a
-
SHA1
96f8cae1c4587ca1e6ad1565e78a8958e834b91d
-
SHA256
c1a887d69fcb19483c1335ee94cdb9bcfd5343a9ece2ff8c910abda52667bc1e
-
SHA512
1b436c2abf5bf3479cb6dfffd5f11b074db915a65c1fea1acf1de2bc2ef4bd98aa2d7d26a49202ecede9aad440d863aae053c79a3df2ebd5521d33c170f37638
-
SSDEEP
24576:YH4WZb28o3xvu9xs/2cVqOh3+58W7kWBjy5s:YnZ6Jmi/VlEr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d21b84ec971c46e36e82ac67eb2ce8a_JaffaCakes118
Files
-
9d21b84ec971c46e36e82ac67eb2ce8a_JaffaCakes118.dll windows:6 windows x86 arch:x86
5b26b17878983d137cb8d994ae50e0ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsWow64Process
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
msvcp140
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
vcruntime140
memmove
api-ms-win-crt-stdio-l1-1-0
fgetc
api-ms-win-crt-runtime-l1-1-0
_initterm_e
api-ms-win-crt-filesystem-l1-1-0
_lock_file
api-ms-win-crt-heap-l1-1-0
free
wtsapi32
WTSSendMessageW
user32
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
Exports
Exports
Sections
.text Size: - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.u0w0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.u0w1 Size: 787KB - Virtual size: 787KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 740B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ