Main
Static task
static1
Behavioral task
behavioral1
Sample
0fdddf880a50cbd1faa242af1e444cd7_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0fdddf880a50cbd1faa242af1e444cd7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0fdddf880a50cbd1faa242af1e444cd7_JaffaCakes118
-
Size
296KB
-
MD5
0fdddf880a50cbd1faa242af1e444cd7
-
SHA1
02d53dd0396e2d46a480e4207ec1989ef2f9c9d0
-
SHA256
1c60159fb18dc2bba369ff6d9b9a133377aae0cc154127c17358af6514e02d48
-
SHA512
cca9a841d50d03af1e9640f0c7107839402d617d9844a0d539568e37d9f70cd03af9208190ba108e5930081b070d26b269a34be6ebd06fdf7f8cbcc6e8b5e35c
-
SSDEEP
3072:xXpsGocuUX6tVpKtjPK5izRJsx0KePWZ3OvofS:/s3tUqtVpkkx0Ke0O3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fdddf880a50cbd1faa242af1e444cd7_JaffaCakes118
Files
-
0fdddf880a50cbd1faa242af1e444cd7_JaffaCakes118.dll windows:4 windows x86 arch:x86
aa13b55f897bf5f9b0e7eb535a1785e9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
Process32Next
CreateToolhelp32Snapshot
CloseHandle
OpenProcess
Process32First
ReadProcessMemory
Sleep
CreateThread
GetCurrentProcessId
SetUnhandledExceptionFilter
RaiseException
InterlockedExchange
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
EnterCriticalSection
LeaveCriticalSection
GetLastError
ReadFile
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
SetConsoleCtrlHandler
FatalAppExitA
HeapAlloc
HeapReAlloc
VirtualAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetEndOfFile
LCMapStringA
LCMapStringW
RtlUnwind
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsBadCodePtr
user32
MessageBoxA
FindWindowA
Exports
Exports
Sections
.text Size: 236KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ