Static task
static1
Behavioral task
behavioral1
Sample
076fa0ccdf7a66dad10a1585ecbbd7d8_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
076fa0ccdf7a66dad10a1585ecbbd7d8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
076fa0ccdf7a66dad10a1585ecbbd7d8_JaffaCakes118
-
Size
10KB
-
MD5
076fa0ccdf7a66dad10a1585ecbbd7d8
-
SHA1
c20814ea22141c2a6c966aaa1d6a82626a46c8f9
-
SHA256
ae63192d1810ad4a6961eeae6746c0d898534a18cd6b99b11eed97f3ea2be7dd
-
SHA512
9565114d4ade66d334ec0887ea05d34f18e33b0bafb09ca5ea1aec5955f6e8aca548e2fa0e181f3ccffb64589f689ccea68f00684ba832fdd20bcdd65c48dd0e
-
SSDEEP
192:pwDJnfkoyl7FrQqt12glKEQZkW8XVB0NbaNN8+FgSxh2yTIrDOJTusWl:SxUlRr3tbQZkX7NN8+mS2SJs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 076fa0ccdf7a66dad10a1585ecbbd7d8_JaffaCakes118
Files
-
076fa0ccdf7a66dad10a1585ecbbd7d8_JaffaCakes118.dll windows:4 windows x86 arch:x86
3fc54ed948a8a5520481237865ab8240
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CompareStringA
IsBadReadPtr
LoadLibraryA
GetModuleHandleA
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
GetProcAddress
lstrlenA
WideCharToMultiByte
GetPrivateProfileStringA
GetCurrentProcess
CreateThread
Sleep
GetCurrentProcessId
GetTickCount
FreeLibrary
GetModuleFileNameA
VirtualProtect
GetProcessHeap
OpenProcess
HeapAlloc
user32
GetWindowThreadProcessId
FindWindowA
SetTimer
GetMessageA
DispatchMessageA
TranslateMessage
KillTimer
wsprintfA
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
msvcrt
_strcmpi
_except_handler3
strstr
strrchr
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ