Static task
static1
Behavioral task
behavioral1
Sample
16e391bcb631399223b4eb99b536de96_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16e391bcb631399223b4eb99b536de96_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
16e391bcb631399223b4eb99b536de96_JaffaCakes118
-
Size
24KB
-
MD5
16e391bcb631399223b4eb99b536de96
-
SHA1
d9c6ca2e583afacb7a14d1ea41d508851f54b696
-
SHA256
f47107e2d79b7c6a7d6d687fec80bfa6c89af2a1e2cf85e68d1c84752734030a
-
SHA512
02ab0ea7a520d1d3d9ae6daa49fb413b40940b5b55f793a9c10c7b5996e8a425570e62bb2a7c1100ab6b9d03dac91da0dfea4db576c40e289dc20c48cd544b9b
-
SSDEEP
192:KrpxFv5IcqgIuE/S82AnJdaGT39IT3g9FP9O9/4LHZE5E2t5UT7+rq:KFbh5qgIvSjGJgG73OWHZE5E2t5Guq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16e391bcb631399223b4eb99b536de96_JaffaCakes118
Files
-
16e391bcb631399223b4eb99b536de96_JaffaCakes118.dll windows:4 windows x86 arch:x86
0bdeef1bfd5c5084d3edcc94177f03cc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
GetClassNameA
GetWindowThreadProcessId
EnumWindows
EnumChildWindows
SetForegroundWindow
GetWindowTextA
SetWindowTextA
msvcrt
malloc
_adjust_fdiv
_strupr
free
atoi
memcpy
strchr
strcmp
strstr
fopen
fwrite
fclose
fread
time
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
_strlwr
_itoa
_initterm
kernel32
CreateEventA
Sleep
LoadLibraryA
WaitForSingleObject
ExitProcess
TerminateProcess
GetCommandLineA
GetProcAddress
GetModuleFileNameA
CreateThread
GetTempPathA
SetEvent
lstrlenA
lstrcpyA
ReadProcessMemory
lstrcatA
GetCurrentProcessId
GetCurrentProcess
VirtualProtectEx
WriteProcessMemory
lstrcmpA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 970B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ