ClusterUpgradeCompatibilityCheck
Static task
static1
Behavioral task
behavioral1
Sample
10686f63d7d573fc32ea32515050610c_JaffaCakes118.dll
Resource
win7-20240611-en
General
-
Target
10686f63d7d573fc32ea32515050610c_JaffaCakes118
-
Size
138KB
-
MD5
10686f63d7d573fc32ea32515050610c
-
SHA1
96d4016d1c24e48871262067023195f2258e3fb1
-
SHA256
4c94988ce5410f5fa622242b0c939946ef3d30ad72f5fa5b1fb0fb2d8f2a6e6b
-
SHA512
291b3df439b1866608be3893b13f622a4b19f21de1794e8eb6642dda0b791b82c0494d428b6aa6fe2414195c6e875e59e406bbbad724ed38783384cf46f69d99
-
SSDEEP
3072:lRB6igBt/cwP9aAnI0wtFEQLOiib3wEzR4rUjS:DXgBlVpnuIwSRq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10686f63d7d573fc32ea32515050610c_JaffaCakes118
Files
-
10686f63d7d573fc32ea32515050610c_JaffaCakes118.dll windows:5 windows x86 arch:x86
9bf7967399e3f2e5249fde63df5d27cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntdll
RtlUnwind
kernel32
CloseHandle
WriteFile
GetLocalTime
SetFilePointer
CreateFileW
ExpandEnvironmentStringsW
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
GetProcAddress
GetModuleHandleA
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
LeaveCriticalSection
VirtualFree
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
VirtualProtect
GetSystemInfo
VirtualQuery
FlushFileBuffers
InterlockedCompareExchange
GetModuleFileNameW
DisableThreadLibraryCalls
HeapFree
GetProcessHeap
HeapAlloc
GetVersionExW
GetLastError
HeapCreate
GetACP
CreateDirectoryW
GetFileAttributesW
user32
wvsprintfW
LoadStringW
advapi32
RegSetValueExW
RegCloseKey
OpenServiceW
RegCreateKeyExW
CloseServiceHandle
OpenSCManagerW
clusapi
GetClusterInformation
CloseCluster
OpenCluster
Exports
Exports
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ