fa
Static task
static1
Behavioral task
behavioral1
Sample
3309942e7e096c79b85433d2506c2abc_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3309942e7e096c79b85433d2506c2abc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3309942e7e096c79b85433d2506c2abc_JaffaCakes118
-
Size
8KB
-
MD5
3309942e7e096c79b85433d2506c2abc
-
SHA1
a0121487d6907e5c39f387a7c43058d946dc4128
-
SHA256
3932cb04b8678227bc14600ac6cc2a22171ed5590fa9c83b334c2e107caa24ef
-
SHA512
cf004c045cab6b5c5b8e7e4da4dbbb070ab3c12c76a1a2eef4d732aa1071d2f417a35e7acef59e839e13be66e782f96b3ccfb3f55c0f3d5feb128cc47051a402
-
SSDEEP
96:C7YEIEHYu0BU1jM46Z0Ka4AM5GjE9EYafhccl65D:IZHYNU1Y4mw0Ao9EPycl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3309942e7e096c79b85433d2506c2abc_JaffaCakes118
Files
-
3309942e7e096c79b85433d2506c2abc_JaffaCakes118.dll windows:4 windows x86 arch:x86
d2176e7a6d41b28c6e462a11ec16994b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
OpenProcess
GetModuleFileNameA
CreateThread
GetCurrentProcess
IsBadReadPtr
WriteProcessMemory
GlobalLock
VirtualProtectEx
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
GetProcAddress
GetModuleHandleA
VirtualAllocEx
ReadProcessMemory
GlobalFree
Sleep
CloseHandle
user32
IsWindowVisible
SendMessageA
EnumChildWindows
FindWindowExA
FindWindowA
GetWindowThreadProcessId
GetClassNameA
advapi32
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
msvcrt
malloc
_initterm
_stricmp
free
_adjust_fdiv
memcpy
??3@YAXPAX@Z
strcmp
strlen
??2@YAPAXI@Z
strrchr
strcpy
sprintf
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdt Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ