Static task
static1
Behavioral task
behavioral1
Sample
a2b1a45a242cee03fab0bedb2e460587_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a2b1a45a242cee03fab0bedb2e460587_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
a2b1a45a242cee03fab0bedb2e460587_JaffaCakes118
-
Size
127KB
-
MD5
a2b1a45a242cee03fab0bedb2e460587
-
SHA1
e9c9ef312370d995d303e8fc60de4e4765436f58
-
SHA256
5cb7a352535b447609849e20aec18c84d8b58e377d9c6365eafb45cdb7ef949b
-
SHA512
4ced785089832287d634c77c2b5fb16efb2147b75da9014320c98d1bc0933504bfba77273576c35b97548d25acb88a0f2944cbef6a78509f945a8502f8910da8
-
SSDEEP
3072:j5KO2SQhF+VJbGHMjjNNyCkeZjDYJklGCx:oO2SQT+nGHADyAZjJwC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2b1a45a242cee03fab0bedb2e460587_JaffaCakes118
Files
-
a2b1a45a242cee03fab0bedb2e460587_JaffaCakes118.dll windows:5 windows x86 arch:x86
76e8a4f811b021cf503340a0077515cc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateDirectoryA
Sleep
VirtualProtect
CloseHandle
CreateThread
DisableThreadLibraryCalls
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
GlobalAlloc
GetTickCount
GetCurrentThread
VirtualQuery
InterlockedCompareExchange
ResumeThread
FlushInstructionCache
GetCurrentProcess
SetThreadContext
GetThreadContext
VirtualFree
GetLastError
SuspendThread
DebugBreak
VirtualAlloc
SetLastError
GetProcessHeap
SetEndOfFile
HeapSize
HeapReAlloc
GetStringTypeW
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
DecodePointer
GetCommandLineA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
IsProcessorFeaturePresent
MultiByteToWideChar
ReadFile
SetFilePointer
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
GetModuleFileNameW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
FlushFileBuffers
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
RaiseException
SetStdHandle
CreateFileA
WriteConsoleW
LoadLibraryW
CreateFileW
ws2_32
htons
socket
connect
recv
closesocket
inet_ntoa
send
getpeername
ntohs
WSAGetLastError
WSASetLastError
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ