WxStartup
Static task
static1
Behavioral task
behavioral1
Sample
26c1b267b0d024b1ebccdb2832411910_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26c1b267b0d024b1ebccdb2832411910_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
26c1b267b0d024b1ebccdb2832411910_JaffaCakes118
-
Size
11KB
-
MD5
26c1b267b0d024b1ebccdb2832411910
-
SHA1
0b625f8ff834283f3e20272ce30864da577848a8
-
SHA256
1b58f341dd8f9c7e6fd85dd1b6713231c2ed18be04c4c09e7acaac174a3f308f
-
SHA512
7431c2ab10ab0aea13a8736f80e62c9d7d582f5e3d35e86f0b3e69fc2229801b048c64946b26b31e860c19e0a60ce5f1965bf5dde495ef0b2833841455ec6d6c
-
SSDEEP
192:E1KPrGewEOPbUiivJyDCZA7KR7Az9i67XseZzaluW9tXVS/:gurGewdP8n67KR7Axi67XseZzalR9tXg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26c1b267b0d024b1ebccdb2832411910_JaffaCakes118
Files
-
26c1b267b0d024b1ebccdb2832411910_JaffaCakes118.dll windows:5 windows x86 arch:x86
6f6d0988d825034e7c001c9c0acef1df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameW
CreateFileW
GetLastError
SetLastError
MoveFileW
GlobalFree
FindClose
SetCurrentDirectoryW
DeviceIoControl
lstrcmpiW
lstrcatW
FindNextFileW
CloseHandle
GetVersion
DeleteFileW
lstrcpyW
CreateThread
GetVolumeInformationW
SetFilePointer
SetEndOfFile
ReadFile
GetFileAttributesW
Sleep
WideCharToMultiByte
GetSystemDirectoryW
GlobalAlloc
WriteFile
GetTickCount
GetComputerNameW
MoveFileExW
CreateProcessW
SetErrorMode
FindFirstFileW
user32
wsprintfW
advapi32
RegCloseKey
RegOpenKeyExW
CryptDecrypt
CryptDestroyKey
CryptGenKey
CryptEncrypt
CryptImportKey
CryptReleaseContext
CryptAcquireContextW
CryptExportKey
RegSetValueExW
RegCreateKeyExW
shell32
ord64
ntdll
memset
RtlInitUnicodeString
memmove
ZwLoadDriver
wininet
HttpSendRequestW
InternetSetOptionW
HttpQueryInfoW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetReadFile
HttpOpenRequestW
ws2_32
gethostname
htons
gethostbyname
shlwapi
PathRemoveFileSpecW
StrToIntW
PathAppendW
SHDeleteKeyW
PathFindFileNameW
iphlpapi
GetAdaptersInfo
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ