DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
21099d8981f5f25c1fae4d0df6cfc145_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
21099d8981f5f25c1fae4d0df6cfc145_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
21099d8981f5f25c1fae4d0df6cfc145_JaffaCakes118
-
Size
9KB
-
MD5
21099d8981f5f25c1fae4d0df6cfc145
-
SHA1
59b187cc8753f746a7eaa65734f70572d9f2560b
-
SHA256
b9dcddf35faf85a85cac3343d31f34eedc94c0f688e4144df24ee19f8bc62c3c
-
SHA512
2a398e11af73aea685e14a364e4397a37c28f09f2a1944bf8f7cf57b3f3789757b978117d74128c730b74ece4736a0da49aad416ab9ef60e096608bb079fad6c
-
SSDEEP
192:OkvWoICOdO0XFyl1eh6IG+RTYpdIhwthzB:OQOdOuFgerRTY7IhOhzB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21099d8981f5f25c1fae4d0df6cfc145_JaffaCakes118
Files
-
21099d8981f5f25c1fae4d0df6cfc145_JaffaCakes118.dll windows:4 windows x86 arch:x86
cc31cc82fb49901b00964b09073394ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
StrStrIA
UrlCanonicalizeA
StrCatBuffA
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
kernel32
GetWindowsDirectoryA
QueryPerformanceCounter
VirtualFree
InterlockedIncrement
InterlockedDecrement
VirtualAlloc
TlsFree
TlsAlloc
CreateThread
GetModuleFileNameA
GetTickCount
TlsSetValue
TlsGetValue
lstrlenA
WideCharToMultiByte
lstrcpynA
_lcreat
Sleep
lstrcmpiA
lstrcpyA
lstrcatA
_lclose
_lwrite
MultiByteToWideChar
user32
GetWindowRect
MoveWindow
GetSystemMetrics
GetWindowTextA
advapi32
RegCloseKey
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
RegSetValueExA
shell32
ShellExecuteA
Exports
Exports
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 361B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sao Size: 512B - Virtual size: 13B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ