Static task
static1
Behavioral task
behavioral1
Sample
08c46d933fda8e63b12d532659949210_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
08c46d933fda8e63b12d532659949210_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
08c46d933fda8e63b12d532659949210_JaffaCakes118
-
Size
216KB
-
MD5
08c46d933fda8e63b12d532659949210
-
SHA1
9f1c111f405d43084632b4c910e9a648b14c5697
-
SHA256
8367b6d1bd4520644437f384ed050286bdd954f33d708f6abd25ea4a90c958f2
-
SHA512
3ebeae92c113a8d3025a48880009225816b1ef8617d7b9a0bb0675f40f0c329d1dd2c78b2a6097a13a28188ed402791acc23c4dd719eecbf785acbc8b8953575
-
SSDEEP
3072:R5Zo3sTDU5y16iFJGh9mWWjlNECCtPqQQ0ocy/R1yBBOgi6qLBbl+JKS1:R5CqmMWGNUPctvSnh8B8KS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08c46d933fda8e63b12d532659949210_JaffaCakes118
Files
-
08c46d933fda8e63b12d532659949210_JaffaCakes118.dll windows:4 windows x86 arch:x86
23b75b35832f4950d5477c5e3723fa83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCommandLineA
VirtualProtect
OutputDebugStringA
Sleep
InterlockedExchange
GetCurrentThreadId
GetLocalTime
InterlockedCompareExchange
GetProcAddress
LoadLibraryW
FreeLibrary
GetProcessHeap
lstrlenA
CreateFileW
GetFileInformationByHandle
GetFileType
GetTickCount
SetUnhandledExceptionFilter
ReadFile
SetCommTimeouts
ReleaseMutex
WaitForSingleObject
ResetEvent
WriteFile
ClearCommError
GetSystemDirectoryA
CreateFileA
CloseHandle
GetFileSize
PurgeComm
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetOverlappedResult
GetComputerNameA
CancelIo
CreateEventA
WideCharToMultiByte
GetVersionExA
SetEvent
PeekNamedPipe
WaitForSingleObjectEx
LoadLibraryA
CreateThread
SetNamedPipeHandleState
HeapAlloc
HeapFree
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
VirtualQuery
ExitProcess
GetModuleHandleA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetACP
GetOEMCP
GetCPInfo
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetSystemInfo
Sections
.text Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ