GetUpdateAtIndex
Static task
static1
Behavioral task
behavioral1
Sample
27f354706f52a7326e67b94c6168e05c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27f354706f52a7326e67b94c6168e05c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
27f354706f52a7326e67b94c6168e05c_JaffaCakes118
-
Size
161KB
-
MD5
27f354706f52a7326e67b94c6168e05c
-
SHA1
be83bc7a12073eddc8b1f929e11a7deb2c4e239b
-
SHA256
36cea515ef96659285e4b26d8edab11fb0c7a7e21def5bbd98f8ba6c274ddf9e
-
SHA512
d5e2348b9dcfd997c75ad5e2a4ee3a3cfbbf7c0335f9832126b5443b391051aca67f0af13b6e886219ef43db7e41eeba564390f4319ba810c6a9be28715d004b
-
SSDEEP
3072:DqlXTkbnppWglGwWk43UnK1vG4KZR+KR/wS93DI3vvSVnsgH2l48G+E6OPHX:DkkbvtgG43UK1m9R/wS93GvS+eS5G+ED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27f354706f52a7326e67b94c6168e05c_JaffaCakes118
Files
-
27f354706f52a7326e67b94c6168e05c_JaffaCakes118.dll windows:4 windows x86 arch:x86
f3e7dd02233a1d89ac0ded71f8315231
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
ExitProcess
FindResourceA
GetACP
GetCommandLineA
GetEnvironmentVariableA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
LoadResource
MultiByteToWideChar
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
msvcrt
wcscpy
_cexit
_exit
fwprintf
malloc
printf
setlocale
sscanf
time
wcscmp
wcscat
user32
CloseClipboard
SetScrollInfo
SetForegroundWindow
SetFocus
SetClipboardData
GetMenu
FrameRect
EnableWindow
CreateIconIndirect
oleaut32
OleIconToCursor
SafeArrayAllocDescriptor
OleLoadPicture
shlwapi
PathBuildRootA
PathGetCharTypeA
ChrCmpIA
SHDeleteValueA
SHEnumKeyExA
PathAppendA
PathFindOnPathA
SHOpenRegStreamA
Exports
Exports
Sections
.text Size: 103KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ