Static task
static1
Behavioral task
behavioral1
Sample
2f6a523a854ec552d20319bb6ba60ad5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f6a523a854ec552d20319bb6ba60ad5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2f6a523a854ec552d20319bb6ba60ad5_JaffaCakes118
-
Size
104KB
-
MD5
2f6a523a854ec552d20319bb6ba60ad5
-
SHA1
6dab2c1f59b69b1746bf1e243337f8f1eee0ce4e
-
SHA256
02b43d883793412da1befbd8ed4ba09df9c75815a1948e0b8354229eb9169809
-
SHA512
f7132878dec0240fa4e69163dcee607e439fd40b687be041799aed396cd3295ec3075cd599cf8122a9597dcd8adb3ccfd0943534d0cc9fa87e1a08996183f8f4
-
SSDEEP
3072:SuT5KfM7cLf1F22jE5nKlF/wl2TPcCm8Ei:5awcz1F22IgTP5m8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f6a523a854ec552d20319bb6ba60ad5_JaffaCakes118
Files
-
2f6a523a854ec552d20319bb6ba60ad5_JaffaCakes118.dll windows:4 windows x86 arch:x86
b0708db33d27d17d2c828bbf1dfdb87a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathRemoveFileSpecA
oleaut32
SysStringLen
SysFreeString
SysAllocString
SafeArrayDestroy
netapi32
DsAddressToSiteNamesA
user32
wsprintfA
TranslateMessage
PeekMessageA
DispatchMessageA
CharUpperBuffA
kernel32
GetSystemDirectoryA
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualUnlock
VirtualLock
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
lstrlenW
lstrlenA
lstrcmpiA
WriteFile
WriteConsoleW
CloseHandle
CompareStringA
CompareStringW
CreateEventA
CreateFileA
CreateFileW
CreateMutexA
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
ExitThread
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStringsW
GetFileAttributesW
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
TlsSetValue
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetWindowsDirectoryA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ResetEvent
ResumeThread
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
WriteConsoleA
dbghelp
DbgHelpCreateUserDump
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ