fx
Static task
static1
Behavioral task
behavioral1
Sample
33eb1676f439913a52fa71e6184ed48d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33eb1676f439913a52fa71e6184ed48d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
33eb1676f439913a52fa71e6184ed48d_JaffaCakes118
-
Size
13KB
-
MD5
33eb1676f439913a52fa71e6184ed48d
-
SHA1
9cbb510f618e85c0e06e29948b42479abe9f7813
-
SHA256
f00ec5da71bea7daf70b068468291aea6c49d4f5abe8e3f67e6588fc36bcd324
-
SHA512
07be19ff08cdcc7d627bba12e2ef4bdb8333fa9f94848433888234f28d880c813a8c49f72d6af2af2d9d950ec1d88d9403cf2dd3be1813e23ed847c8d10a404e
-
SSDEEP
192:emxx93Z5cf3kX+5TSVuT/tK3nXHxrmeWtW5M/taMrbTttQIE4VEWAzQf2dePP:V93zM3kXcTSQmnXZmeW7MkbTFVEWAD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33eb1676f439913a52fa71e6184ed48d_JaffaCakes118
Files
-
33eb1676f439913a52fa71e6184ed48d_JaffaCakes118.dll windows:4 windows x86 arch:x86
eed4e000dc7ec3571925f9d41c63c80b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateThread
GetCurrentProcess
ReadProcessMemory
WriteProcessMemory
Sleep
SetLocalTime
GetLocalTime
GetLastError
CreateMutexA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
IsBadReadPtr
GetCommandLineA
GlobalFree
GlobalLock
GlobalAlloc
GetPrivateProfileStringA
GetCurrentThread
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
user32
GetKeyboardState
SetWindowsHookExA
CallNextHookEx
GetAsyncKeyState
ToUnicode
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
msvcrt
_adjust_fdiv
malloc
_stricmp
_initterm
free
fread
memcpy
strstr
fclose
fopen
??3@YAXPAX@Z
memset
strlen
strrchr
strcmp
strcat
sprintf
strcpy
??2@YAPAXI@Z
strncpy
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdt Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 986B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ