Static task
static1
Behavioral task
behavioral1
Sample
27e24c3d9f3cba0d03f6e5562f4dc0a1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27e24c3d9f3cba0d03f6e5562f4dc0a1_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
27e24c3d9f3cba0d03f6e5562f4dc0a1_JaffaCakes118
-
Size
28KB
-
MD5
27e24c3d9f3cba0d03f6e5562f4dc0a1
-
SHA1
af4f41ef9f1298f4a303f3a1678158755b54cd41
-
SHA256
9889cacda8f330556d3a971de2049e27728e8b463c780de3952487e9ff7930a6
-
SHA512
7a9d806fd5f4d6964f0a3dff2d4717bf42a9dd66591ada9cf3eedc815a94184e3ee1483e0305e0ea90e7f77d27adf6181469527a636b981c5bbe2567ee0028fe
-
SSDEEP
192:CAwWJXDoPwOQTzNNAMKjYlLcbLnJr0Fx0Zeaqb:CAwWFWrUH05Rh8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27e24c3d9f3cba0d03f6e5562f4dc0a1_JaffaCakes118
Files
-
27e24c3d9f3cba0d03f6e5562f4dc0a1_JaffaCakes118.dll windows:4 windows x86 arch:x86
0815cdbf8dc115dddbf78e419dc27759
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42
ord1158
ord2818
ord858
ord4278
ord860
ord2764
ord540
ord800
ord537
ord939
msvcrt
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
__CxxFrameHandler
kernel32
CreateThread
OpenProcess
GetCurrentProcessId
GetModuleFileNameA
Sleep
ReadProcessMemory
CloseHandle
user32
UnhookWindowsHookEx
DispatchMessageA
TranslateMessage
GetMessageA
SetWindowsHookExA
CallNextHookEx
ws2_32
recv
closesocket
send
connect
htons
socket
gethostbyname
WSAStartup
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SHARDAT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 596B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ