Static task
static1
Behavioral task
behavioral1
Sample
101819ae30592ff02a63cb8e0535a8fe_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
101819ae30592ff02a63cb8e0535a8fe_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
101819ae30592ff02a63cb8e0535a8fe_JaffaCakes118
-
Size
68KB
-
MD5
101819ae30592ff02a63cb8e0535a8fe
-
SHA1
f740bef4413fb94767128abf719fc6430b40c4e0
-
SHA256
90169598c312ab64341ac903fc3d83f90a0cc7539b653de30302e7495fbd64a9
-
SHA512
be8c345bba47a1edc48383ca5457ee892c41cc548c591aba6b5912b8565e87d75f04a25c20e5315562340219beb03d9d78f355c451b5240c56c502734d5622b9
-
SSDEEP
1536:XZh5DYLNE+AzknRypaSMzCmxJSZPxvx3EnWg:XD5MLNE+AzknRypaXzcZJJUW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101819ae30592ff02a63cb8e0535a8fe_JaffaCakes118
Files
-
101819ae30592ff02a63cb8e0535a8fe_JaffaCakes118.dll windows:4 windows x86 arch:x86
10d4f5f58cf040d0f08d9fde55f3958e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
DisableThreadLibraryCalls
EnumUILanguagesW
CloseHandle
CreateProcessW
InterlockedExchange
HeapAlloc
GetProcessHeap
SetUnhandledExceptionFilter
lstrlenA
MultiByteToWideChar
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LeaveCriticalSection
InterlockedDecrement
SetLastError
GetCommandLineA
VirtualProtect
VirtualFree
HeapFree
VirtualAlloc
user32
LoadStringA
PostMessageA
advapi32
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExA
RegOpenKeyExW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
msvcr71
__CppXcptFilter
wcschr
wcscmp
wprintf
_wcsicmp
_CxxThrowException
_except_handler3
_adjust_fdiv
_amsg_exit
_initterm
free
_XcptFilter
malloc
_onexit
_lock
__dllonexit
memset
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ