Static task
static1
Behavioral task
behavioral1
Sample
15c62af9988bdd2b933212fb7fa23de8_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15c62af9988bdd2b933212fb7fa23de8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
15c62af9988bdd2b933212fb7fa23de8_JaffaCakes118
-
Size
45KB
-
MD5
15c62af9988bdd2b933212fb7fa23de8
-
SHA1
73905311756140dfea2dfa35e4e9fd64db98d730
-
SHA256
9c3e73ad9fd8b0837759551706d9e7ca9873710f19baf2e02afe0f7b791c0b0c
-
SHA512
181cfa996f27426896ed20c52ce41d263d57bb9f507a9797ec843d8cf128d7f958bcc6294e7b39531911b5fcad36ae77112dfa9a8e331618eb4237a27329235b
-
SSDEEP
768:rj39eB1IF3bYKZWIvBwhiEyGsU9yeLka5WMH9w3xnOdIDAM+t8Y2XgaLIAT4uBap:rj39eIWIysUEekaq3xO0ALt8DlIATUSm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15c62af9988bdd2b933212fb7fa23de8_JaffaCakes118
Files
-
15c62af9988bdd2b933212fb7fa23de8_JaffaCakes118.dll windows:4 windows x86 arch:x86
c3602fc18148a1aa9bd1e5e2de6303d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
SHEnumKeyExA
SHEnumKeyExW
SHCopyKeyA
SHCopyKeyW
SHDeleteEmptyKeyA
SHDeleteEmptyKeyW
HashData
kernel32
GetCurrentDirectoryW
GetSystemDirectoryA
GetSystemDirectoryW
Beep
CloseHandle
CompareStringA
OpenEventA
DeleteFileA
DeviceIoControl
GetExitCodeProcess
GetExitCodeThread
GetModuleFileNameA
GetModuleHandleA
GetNamedPipeInfo
GetProcessHeap
GetCurrentProcessId
GetStdHandle
GetCurrentThreadId
GetThreadLocale
IsSystemResumeAutomatic
IsValidLocale
ReleaseSemaphore
SetFilePointer
GetStartupInfoA
GetComputerNameA
GetBinaryTypeA
GetCurrentDirectoryA
BackupRead
SetCurrentDirectoryA
FlushViewOfFile
GetDriveTypeA
GetWindowsDirectoryW
GetWindowsDirectoryA
BackupSeek
ole32
OleRun
user32
ReleaseDC
advapi32
GetUserNameW
GetUserNameA
RegLoadKeyA
msvcrt
malloc
free
toupper
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
winmm
DrvGetModuleHandle
timeGetDevCaps
GetDriverModuleHandle
OpenDriver
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ