Static task
static1
Behavioral task
behavioral1
Sample
0ddf157ce68df9409060ede59aea3889_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0ddf157ce68df9409060ede59aea3889_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
0ddf157ce68df9409060ede59aea3889_JaffaCakes118
-
Size
95KB
-
MD5
0ddf157ce68df9409060ede59aea3889
-
SHA1
6d2116eb45f0152d241a341b095415bc9fb1a5be
-
SHA256
8d4dcb9968535bde4f74a8bfd360b3e7969ca298359b4891e73d808cbefbb3b0
-
SHA512
4b3b398dd1ec6eaf210a7599e465832bedeb0cc288e4e16e1b7cce14dc98101f159ee3aed1040d1384b10001b4fbe7b6d7aa2245ad583e171bb1ce464048c0b2
-
SSDEEP
1536:6BXJ9tZNbZILJQV6VTfaBUgIV2YegSa9JaBgeUMqFYAoD:6B59tH+LJQMVTkAeNQzS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ddf157ce68df9409060ede59aea3889_JaffaCakes118
Files
-
0ddf157ce68df9409060ede59aea3889_JaffaCakes118.dll windows:4 windows x86 arch:x86
08d5e1f53017a0ef3be58c4c8f56202b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LocalAlloc
UnmapViewOfFile
WriteFile
SetEvent
HeapValidate
CreateFileA
GetFileSize
CreateFileMappingW
CloseHandle
MapViewOfFile
SetFilePointer
GlobalFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedExchange
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
lstrlenW
GetLocaleInfoA
GetUserDefaultLCID
DisableThreadLibraryCalls
lstrcmpiW
FreeLibrary
MultiByteToWideChar
GlobalLock
GlobalAlloc
GlobalUnlock
Sleep
InterlockedCompareExchange
VirtualProtect
VirtualFree
GetCommandLineA
TerminateProcess
VirtualAlloc
user32
CharNextW
GetSystemMetrics
advapi32
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
msvcr71
_errno
__dllonexit
_except_handler3
free
_XcptFilter
isdigit
isspace
memmove
_adjust_fdiv
_onexit
__CxxFrameHandler
memset
malloc
_CxxThrowException
_initterm
__CppXcptFilter
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ