Static task
static1
Behavioral task
behavioral1
Sample
27678233e040d2b0581fe80557b67927_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
27678233e040d2b0581fe80557b67927_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
27678233e040d2b0581fe80557b67927_JaffaCakes118
-
Size
11KB
-
MD5
27678233e040d2b0581fe80557b67927
-
SHA1
877483f2769449c1eac0d8af1db650bee1222ab5
-
SHA256
7acec788f2a70720f7a61311aa019629f35a3be523411969cddc868a5b3af4a7
-
SHA512
4e94d0e3dc6a9f936922e821fe84e1a6e88cd0ad50caf1782c81134d2c69d2031eec9adb6dca1cad6d0938cce8a440070f4a4f226e4035d181bbbc66a8c52b8d
-
SSDEEP
192:DTUpLXGoP4NAdYsw7YHGgkha61lTNFKkMrqKO6RTVTFK:DGL2oP4NA9w7YH43LpnWqwRBp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27678233e040d2b0581fe80557b67927_JaffaCakes118
Files
-
27678233e040d2b0581fe80557b67927_JaffaCakes118.dll windows:4 windows x86 arch:x86
a566a94d49312404b1cf9c90cb26878d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
socket
connect
bind
recvfrom
listen
accept
WSAStartup
gethostbyname
send
htons
sendto
closesocket
select
__WSAFDIsSet
recv
wininet
InternetConnectA
InternetGetConnectedStateEx
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
FtpPutFileA
urlmon
URLDownloadToFileA
kernel32
ExitProcess
WinExec
GetWindowsDirectoryA
CreateThread
Sleep
lstrcatA
lstrcmpA
lstrlenA
lstrcpyA
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
GlobalFree
user32
CharLowerBuffA
advapi32
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ