PER069
Static task
static1
Behavioral task
behavioral1
Sample
02cbfdd7f6f534fd6a47c285d60c9dd1_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02cbfdd7f6f534fd6a47c285d60c9dd1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
02cbfdd7f6f534fd6a47c285d60c9dd1_JaffaCakes118
-
Size
30KB
-
MD5
02cbfdd7f6f534fd6a47c285d60c9dd1
-
SHA1
33d57d0428d7d52d2d4f91c02215ba8a8e24fd82
-
SHA256
6b84e768cbfc5a544187a7a5792b99dae98a9d0548075be7516c7dc4d155adf3
-
SHA512
39bd490a2eecdc45ba5d936990e77b742edbdee9f0dfab49fbe02829a6353b8b035a5501ea7cec60c30f76a7386c03c8ea5c5360c9f740868fa5b929f8b5473d
-
SSDEEP
768:KgBDW1KoZkuW9xd+YJTJv6YZ7nZjpP2a:NW1ZkuWzd+YJT8c32a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02cbfdd7f6f534fd6a47c285d60c9dd1_JaffaCakes118
Files
-
02cbfdd7f6f534fd6a47c285d60c9dd1_JaffaCakes118.dll windows:1 windows x86 arch:x86
9016ed03fe410cb8e3bc14f1d2920b6e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
MultiByteToWideChar
OutputDebugStringA
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
ole32
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
oleaut32
GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
Exports
Exports
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rloc Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ