SP_RQHandler
Static task
static1
Behavioral task
behavioral1
Sample
1bfa2bcd09f8fdf25eb6599f995b6854_JaffaCakes118.dll
Resource
win7-20240611-en
General
-
Target
1bfa2bcd09f8fdf25eb6599f995b6854_JaffaCakes118
-
Size
274KB
-
MD5
1bfa2bcd09f8fdf25eb6599f995b6854
-
SHA1
44e3b59790bccbb8650f5115bb07f4dd4b3bab60
-
SHA256
de04393109575f0710d6f61a4076d5c7c9cdf763c8d3ce6db7f0a6ef0beebda6
-
SHA512
1190793d21714602dbf5fd496add3407f2944e9596e616a99c3025cb1ff27bb2e8390ca7dd696705a163cfae29781407b3071d3ee7fa57840faaf8f014801faa
-
SSDEEP
6144:OenFgacc+pFf+q0Pj52cuaZf/EFpkXsDePGaqqqBmMfujPu:OenFlcc+pFYLuO/UDQGEQuC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bfa2bcd09f8fdf25eb6599f995b6854_JaffaCakes118
Files
-
1bfa2bcd09f8fdf25eb6599f995b6854_JaffaCakes118.dll windows:4 windows x86 arch:x86
a44083ee1e7860b77538ee828845ea62
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapReAlloc
GetProcAddress
lstrcatA
LoadLibraryA
lstrlenA
lstrcpyA
GetLastError
CloseHandle
GetTempFileNameA
GetTempPathA
CreateFileA
ReadFile
SetFilePointer
WriteFile
DeleteFileA
HeapFree
HeapAlloc
GetCommandLineA
GetModuleHandleA
GetVersion
FreeLibrary
HeapCreate
HeapDestroy
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
DisableThreadLibraryCalls
Exports
Exports
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE