?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
052a32cadff6b4222712c60ecb0096b5_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
052a32cadff6b4222712c60ecb0096b5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
052a32cadff6b4222712c60ecb0096b5_JaffaCakes118
-
Size
40KB
-
MD5
052a32cadff6b4222712c60ecb0096b5
-
SHA1
c68e41c6b0c1c6dca0c893e4bdcd17ba183abe5b
-
SHA256
5c65022f5182e79ae93382ff5e8efa026908d659eb1ccf68044b8f2c750fe4d0
-
SHA512
106be37dbe346cf9994322e6310eff22cf74dd8781041b18fa3cb3dac06e3516aea2164acd6a892bb9b69368ff6889c7cae6c48fd0977b52165e6ed1193ae6c5
-
SSDEEP
384:rfOgJ2P430DhTOqStOKkzfsphC0Pbac06qjrdelhkjtQxS7vW/Wt:rmgq4kFaJtDifohbQrdAh8R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 052a32cadff6b4222712c60ecb0096b5_JaffaCakes118
Files
-
052a32cadff6b4222712c60ecb0096b5_JaffaCakes118.dll windows:4 windows x86 arch:x86
03ae861509d68e89ae3855c6bb8e8b29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
ws2_32
send
connect
closesocket
WSACleanup
htons
gethostbyname
socket
WSAStartup
recv
msvcrt
atoi
rand
strncpy
sscanf
fopen
printf
fseek
ftell
fgetc
fread
fclose
memcpy
memset
strcmp
strtok
strtol
strcat
strstr
sprintf
time
strlen
strcpy
kernel32
GetLastError
LocalAlloc
lstrcmpiA
GetCurrentProcess
OpenProcess
VirtualAllocEx
WriteProcessMemory
GetModuleHandleA
CreateRemoteThread
GetVolumeInformationA
GetVersionExA
Sleep
CloseHandle
GetFileSize
CreateFileA
DeleteFileA
CreateThread
WinExec
lstrcatA
GetSystemDirectoryA
lstrcpyA
lstrlenA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetComputerNameA
WritePrivateProfileStringA
user32
EnumWindows
FindWindowExA
GetWindow
SendMessageA
wsprintfA
CharUpperA
GetWindowTextA
advapi32
QueryServiceConfigA
ChangeServiceConfigA
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegQueryValueExA
RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
ole32
CoCreateGuid
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ