winampGetInModule2
Static task
static1
Behavioral task
behavioral1
Sample
308250bff37c13b9a23a916454721e29_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
308250bff37c13b9a23a916454721e29_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
308250bff37c13b9a23a916454721e29_JaffaCakes118
-
Size
7KB
-
MD5
308250bff37c13b9a23a916454721e29
-
SHA1
5854bcfed9c8927323111b435e3c11ba7c6ca830
-
SHA256
0b0a6fc213cdb9bf6b21c1d0bcd83da398e8aad1392f285484bffe7e33254fb8
-
SHA512
e07bb83021d5d06aee7078307c002df3da20cb6e3f2f8fe7703aab119aad2e1a123071434dea8cc3578775cf9936565aaec86b068793f0373851e04634822e7b
-
SSDEEP
96:FkjICu2tpG7otjvd9Vr+cwrunEse1YctPDxkbDi8SD:Fk+2tW8JrnePlDxkbWt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 308250bff37c13b9a23a916454721e29_JaffaCakes118
Files
-
308250bff37c13b9a23a916454721e29_JaffaCakes118.dll windows:5 windows x86 arch:x86
a330ab4571994ddebf91be7a95f5c0d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WaitForSingleObject
GetTickCount
Sleep
CloseHandle
CreateThread
lstrlenA
DisableThreadLibraryCalls
GetModuleHandleA
CompareStringA
InterlockedExchange
RaiseException
FreeLibrary
LoadLibraryA
GetLastError
LocalAlloc
GetProcAddress
user32
wsprintfA
wsprintfW
MessageBoxIndirectW
SendMessageA
msvcr90
memset
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ