Static task
static1
Behavioral task
behavioral1
Sample
08c7fe50a2e19a4a01c61bf9f9736d69_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08c7fe50a2e19a4a01c61bf9f9736d69_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
08c7fe50a2e19a4a01c61bf9f9736d69_JaffaCakes118
-
Size
908KB
-
MD5
08c7fe50a2e19a4a01c61bf9f9736d69
-
SHA1
3b24399691fbcf754e3406cdbe9cfd4264a964ba
-
SHA256
152f4b0044454dd2a676fb534607e51900f6fdfed3bfcada8142b36b642b975d
-
SHA512
3b4b4a674ba21837db9806c2b5bed992689b7c9826f9070c6f8879aa14c594f0010667d172fdd0d8c9d2f9957a3b20de02f5694f40e81867ca4e35710d980baf
-
SSDEEP
24576:DckOC/OHUmpw3i5DF6EyfHfSqxZvcH7/:AkHIpw3i5DFvgHfjWz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08c7fe50a2e19a4a01c61bf9f9736d69_JaffaCakes118
Files
-
08c7fe50a2e19a4a01c61bf9f9736d69_JaffaCakes118.dll windows:5 windows x86 arch:x86
8c4f7b2ab8e0cc7d7ca468d8ec94c3b7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReleaseMutex
GlobalSize
SetEvent
GetFileSize
GlobalLock
GetModuleHandleA
GetSystemDirectoryA
GetQueuedCompletionStatus
GetTickCount
SetErrorMode
PostQueuedCompletionStatus
CompareStringA
GetCurrentProcess
GlobalFree
WriteFile
InterlockedIncrement
MoveFileExW
GetLogicalDrives
SetLastError
LocalFree
GetSystemTimeAsFileTime
GetCurrentThreadId
lstrlenA
GetStdHandle
LoadLibraryA
Sleep
EnterCriticalSection
InterlockedExchange
CloseHandle
WaitForSingleObject
GlobalAlloc
LeaveCriticalSection
GetLastError
FlushInstructionCache
GetLocalTime
InitializeCriticalSection
FindClose
DebugBreak
ReadFile
SystemTimeToFileTime
HeapAlloc
HeapCreate
DeleteCriticalSection
ResetEvent
GetWindowsDirectoryA
GetProcessTimes
SetFilePointer
DeviceIoControl
GlobalUnlock
CreateIoCompletionPort
FreeLibrary
HeapDestroy
GetExitCodeProcess
GetModuleFileNameA
CreateThread
InterlockedDecrement
user32
EmptyClipboard
MonitorFromPoint
GetLastInputInfo
OpenClipboard
ShowWindow
GetDC
KillTimer
GetDoubleClickTime
IsWindow
ReleaseDC
SetForegroundWindow
TranslateMessage
TrackPopupMenu
GetSystemMetrics
GetSubMenu
CloseClipboard
PostQuitMessage
DestroyMenu
SetClipboardData
EnableMenuItem
SetTimer
DestroyWindow
GetCursorPos
gdi32
GetDeviceCaps
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
RegCloseKey
shell32
SHGetSpecialFolderPathW
SHEmptyRecycleBinW
ole32
CoTaskMemFree
OleUninitialize
CoCreateInstance
CoUninitialize
CoCreateGuid
CoInitialize
OleInitialize
oleaut32
SysFreeString
VariantClear
SysAllocStringLen
VariantInit
SysAllocString
winmm
timeGetTime
waveOutGetNumDevs
iphlpapi
GetAdaptersInfo
secur32
DeleteSecurityContext
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textes Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 305KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 233KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ