Static task
static1
Behavioral task
behavioral1
Sample
002472ab5e803dd2798df7f7bd3ea31f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
002472ab5e803dd2798df7f7bd3ea31f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
002472ab5e803dd2798df7f7bd3ea31f_JaffaCakes118
-
Size
131KB
-
MD5
002472ab5e803dd2798df7f7bd3ea31f
-
SHA1
4556eb626d83cd5dbc8e37a288b5f69a975bf269
-
SHA256
a720902ad7c3c7a2bb58b2449fb70164efbb96396e661328ee2fcc06f13ad9fc
-
SHA512
9eb8d3d6d17018e518ad1d3e9a9432fb4798ee75673bfd59cc96aa6974126618c2fb2ee2cf0abe2fb07b02a456c846383a0084e1d9f8f406fc431ab27377cb8e
-
SSDEEP
3072:Q0Kre4FYl0Js3zp+KOMPEUruunGgB/shWoDR:qLl27PZP/sh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 002472ab5e803dd2798df7f7bd3ea31f_JaffaCakes118
Files
-
002472ab5e803dd2798df7f7bd3ea31f_JaffaCakes118.dll windows:4 windows x86 arch:x86
038498cad3b927da94f24f39a88467e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
DisableThreadLibraryCalls
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
InterlockedIncrement
LocalFree
LocalAlloc
GlobalAlloc
SleepEx
CloseHandle
SetEvent
QueueUserAPC
DuplicateHandle
GetCurrentThread
GetCurrentProcess
GetCurrentThreadId
GetProcAddress
TerminateThread
GetProcessTimes
HeapCreate
WaitForMultipleObjectsEx
SuspendThread
ResumeThread
lstrlenW
WideCharToMultiByte
GlobalFree
Sleep
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MultiByteToWideChar
SwitchToThread
GetStringTypeA
LCMapStringW
GetStringTypeW
FreeLibrary
HeapDestroy
lstrcpynA
lstrcmpiA
lstrlenA
InterlockedDecrement
GetCommandLineA
CreateEventA
VirtualProtect
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
user32
CharNextA
PostMessageA
advapi32
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegDeleteKeyW
ole32
CoCreateInstanceEx
CoCreateInstance
CoTaskMemFree
rpcrt4
RpcSsDestroyClientContext
NdrClientCall2
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ