njmntp
Static task
static1
Behavioral task
behavioral1
Sample
090af1921a174ce6001c1599c0019103_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
090af1921a174ce6001c1599c0019103_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
090af1921a174ce6001c1599c0019103_JaffaCakes118
-
Size
54KB
-
MD5
090af1921a174ce6001c1599c0019103
-
SHA1
4d1c912a7de0f612869a0a6ac3f5add1cd21672b
-
SHA256
061636c6386984514d5d694661c9210fdd28066b06ada3d93e79fa0e288bdd77
-
SHA512
057c7082fbb67409e65c9cc4f1b72a9696ac6468b4cc090359062bb2b9537b2718cfe63a195c43190ab0f15a8a111a5d3737eccd71e67beeb65702c7c7540d2a
-
SSDEEP
1536:XmWWmO09s0Lg0I4pPbsFyhwpN2fJbeGOgIL/7s:Xh9l1I4mnAfJbelTs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 090af1921a174ce6001c1599c0019103_JaffaCakes118
Files
-
090af1921a174ce6001c1599c0019103_JaffaCakes118.dll windows:4 windows x86 arch:x86
05eb9b1f639a3bd30d3f46f4522c0b73
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
SHEnumKeyExA
UrlCanonicalizeA
kernel32
Beep
DnsHostnameToComputerNameA
ExitProcess
GetBinaryTypeA
GetFileType
CancelIo
CallNamedPipeA
lstrlenW
lstrlenA
GetWindowsDirectoryW
GetWindowsDirectoryA
HeapFree
GetSystemDirectoryW
GetSystemDirectoryA
GetComputerNameW
GetCurrentDirectoryW
lstrcmpW
HeapAlloc
GetProcessHeap
GetCurrentDirectoryA
advapi32
GetUserNameW
winmm
DrvGetModuleHandle
mmioOpenA
Exports
Exports
Sections
.code Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 918B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ