GetUpdateAtIndex
Static task
static1
Behavioral task
behavioral1
Sample
101b12d003a40367d18fd728c6749f85_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
101b12d003a40367d18fd728c6749f85_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
101b12d003a40367d18fd728c6749f85_JaffaCakes118
-
Size
158KB
-
MD5
101b12d003a40367d18fd728c6749f85
-
SHA1
c395cab4291145a1405e3afaf2c0d6056df416f7
-
SHA256
6cc18c4ed124eb5f87935e62047c6fbeb371b80f075c61bce3614b8ffa9105b7
-
SHA512
53e95baae7fe7d9b9f4933e3a17ec153c9d1648d0d2ce752d33856f7c5b9c5f3788380250bfd793a9ccd80968e1a67db894064673c4b2f575c89112a414fc25b
-
SSDEEP
3072:KixLaK/MNb+PLXczW5BgP1wM5PN52lMh4eaWT9Ct9XwtR+Ne:7m+P7czW5K1P5Ns2h4AT9qwTm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101b12d003a40367d18fd728c6749f85_JaffaCakes118
Files
-
101b12d003a40367d18fd728c6749f85_JaffaCakes118.dll windows:4 windows x86 arch:x86
e7934a440a43a93ac82890ab0943e1dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CompareStringA
DeleteCriticalSection
ExitProcess
FindResourceA
GetACP
GetCommandLineA
GetEnvironmentStringsW
GetFileType
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTimeAsFileTime
HeapAlloc
HeapCreate
InterlockedIncrement
IsValidLocale
LCMapStringA
LoadResource
MultiByteToWideChar
RtlUnwind
SetErrorMode
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
msvcrt
wcscpy
_cexit
exit
rand
strpbrk
time
vswprintf
free
user32
EnableMenuItem
EnableWindow
IntersectRect
SetClassLongA
SetWindowPlacement
ChildWindowFromPoint
oleaut32
SysStringLen
OleIconToCursor
OleLoadPicturePath
RegisterTypeLi
RevokeActiveObject
SetErrorInfo
SysReAllocString
ClearCustData
shlwapi
PathBuildRootA
PathCombineA
PathFindOnPathA
SHDeleteValueA
SHEnumKeyExA
PathAppendA
Exports
Exports
Sections
.text Size: 100KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ