Static task
static1
Behavioral task
behavioral1
Sample
213241085ad062b53a40d71d1f6f4bc2_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
213241085ad062b53a40d71d1f6f4bc2_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
213241085ad062b53a40d71d1f6f4bc2_JaffaCakes118
-
Size
23KB
-
MD5
213241085ad062b53a40d71d1f6f4bc2
-
SHA1
637503d6087c027b545c1e84f048c759fc63c942
-
SHA256
222ee4fd6d39c306022193d42071f4aeb2876e83268f4e8536c6445390c31569
-
SHA512
c39e72738d084872503d88c3850a80a5be129b18b660414110349ec2147439ac909cfbe1b5700dbc0bce05e98b714dff533543f0d7ad3812d4b78af2942ade53
-
SSDEEP
384:2l3yGiuiza6d+vXBqzD158aNvsNYuT6ETX:o5BFOeT3TX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 213241085ad062b53a40d71d1f6f4bc2_JaffaCakes118
Files
-
213241085ad062b53a40d71d1f6f4bc2_JaffaCakes118.dll windows:4 windows x86 arch:x86
4182c9c958be95f75d89efbb4903f165
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
kernel32
CreateFileA
CreateThread
ExpandEnvironmentStringsA
GetLocalTime
GetLocaleInfoA
GetSystemDirectoryA
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
LocalAlloc
LocalFree
LocalReAlloc
SetCurrentDirectoryA
Sleep
WinExec
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
rasapi32
RasDeleteEntryA
RasDialA
RasEnumConnectionsA
RasEnumDevicesA
RasEnumEntriesA
RasHangUpA
RasSetEntryPropertiesA
RasValidateEntryNameA
user32
wsprintfA
CharLowerA
FindWindowA
GetCursorPos
GetLastInputInfo
PostMessageA
wininet
InternetGetConnectedState
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ