CharkPlay
Static task
static1
Behavioral task
behavioral1
Sample
08538c853172fd5a606f8b7c2dd58524_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
08538c853172fd5a606f8b7c2dd58524_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
08538c853172fd5a606f8b7c2dd58524_JaffaCakes118
-
Size
28KB
-
MD5
08538c853172fd5a606f8b7c2dd58524
-
SHA1
0753f167ce241945dbdbe657a85cfc5a5b83a3a8
-
SHA256
9085a659415ba1f37e6043120210e9a595876e315ce03ca17be4959836dd00ad
-
SHA512
005704a683c7f9c98c6af830872ca56b24bf0df38a8f74f0b38a86fbdd88a5473ddbff04fddaf96f8822f86a019c951beb187466f3734988e7d129fc45cc4749
-
SSDEEP
192:y6cCgUr7hC1ab0Ch86oJ0yydT9zHJw4FGj0hHT/o6:yhWCH8ZS0yST70AhM6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08538c853172fd5a606f8b7c2dd58524_JaffaCakes118
Files
-
08538c853172fd5a606f8b7c2dd58524_JaffaCakes118.dll windows:4 windows x86 arch:x86
7e493ceaffe8175007a9bc93a0843315
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WaitForSingleObject
OpenMutexA
GetTempPathA
FreeLibrary
CreateEventA
ExitProcess
GetProcAddress
GetVolumeInformationA
GetComputerNameA
GlobalMemoryStatus
GetSystemInfo
GetVersionExA
GetVersion
GetSystemDirectoryA
Sleep
LoadLibraryA
CloseHandle
SetEvent
OpenEventA
GetCurrentProcessId
ReleaseMutex
user32
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
ToAscii
GetKeyboardState
SendMessageA
IsWindow
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
wininet
InternetSetOptionA
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
msvcrt
strcat
malloc
free
_beginthreadex
sprintf
atoi
strchr
strcpy
_adjust_fdiv
_initterm
_onexit
__dllonexit
memcpy
fclose
fwrite
strlen
fopen
??2@YAPAXI@Z
memset
??3@YAXPAX@Z
strrchr
avicap32
capCreateCaptureWindowA
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ