Static task
static1
Behavioral task
behavioral1
Sample
01d9436cfc9ad93ff61c8e7340cdb58d_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
01d9436cfc9ad93ff61c8e7340cdb58d_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
01d9436cfc9ad93ff61c8e7340cdb58d_JaffaCakes118
-
Size
23KB
-
MD5
01d9436cfc9ad93ff61c8e7340cdb58d
-
SHA1
1310c4bbd47475f645f8090302ab52e0372b7477
-
SHA256
bc487ea550c1999e081b49b7cda3d9af2f6e4cb47e2db907e0bc413e5ea05ab2
-
SHA512
ace643e03fdc750d36c56f4bfd67daed1330b388307374378529e921912b6288b9658ea1a7118e2a9830934a58ea00153188bdbcd56b513b65b59335e417d328
-
SSDEEP
384:HQ5MAcnlfRekQKHShxuh+HG9L+mcsyHuFjdlqQaV5MzdbxAT9tUw:HQ5AVRqKHSzBHGwuFhlqVrMzdbaT9t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01d9436cfc9ad93ff61c8e7340cdb58d_JaffaCakes118
Files
-
01d9436cfc9ad93ff61c8e7340cdb58d_JaffaCakes118.dll windows:4 windows x86 arch:x86
63ee6b0f86324e8b780c93ddbbc6323a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
GetVersionExA
ExitThread
TerminateThread
WaitForMultipleObjects
GetLastError
ReadFile
CreateMailslotA
CloseHandle
WriteFile
SetEvent
WaitForSingleObject
lstrcatA
CreateFileA
HeapReAlloc
HeapAlloc
GetProcessHeap
OpenProcess
HeapFree
lstrlenA
GetFileAttributesA
SetFilePointer
CreateMutexA
ReleaseMutex
SetEndOfFile
CreateEventA
lstrcmpA
ResetEvent
CompareStringA
CompareStringW
lstrlenW
lstrcpyA
CreateThread
GetSystemDirectoryA
CreateDirectoryA
GetTickCount
GetTempFileNameA
DeleteFileA
user32
wsprintfA
advapi32
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CryptDecrypt
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
RegNotifyChangeKeyValue
OpenProcessToken
CreateProcessAsUserA
wininet
HttpOpenRequestA
InternetOpenA
InternetReadFile
InternetCloseHandle
InternetGetConnectedState
HttpSendRequestA
InternetConnectA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ