Activate
Static task
static1
Behavioral task
behavioral1
Sample
340d7aa2b8b44249a8e2f6421dc8c9d0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
340d7aa2b8b44249a8e2f6421dc8c9d0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
340d7aa2b8b44249a8e2f6421dc8c9d0_JaffaCakes118
-
Size
32KB
-
MD5
340d7aa2b8b44249a8e2f6421dc8c9d0
-
SHA1
c14fdda3650e3404445b58837db9c31f9ab34e9c
-
SHA256
9fbef1fa984852d98ca0e117e1d5c9b52cd2983583e84544d617c05c9a3cde8b
-
SHA512
508caeccec4bb27c1fa7ba0a67113167f570fe93ef092b639ebb7664d020e5d07f68951bdf4dfb4dee736d473ac5cda370d7b3893800eb6a9a6625141e18fbc7
-
SSDEEP
768:OCfqjydMUptbtd/ZJfJh1FtsJJiHWhk4Km223Mtrc7j4VprhwfU2aWp6:VgydMUptbtdhJfJh1FtsJdom2pW4Gba
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 340d7aa2b8b44249a8e2f6421dc8c9d0_JaffaCakes118
Files
-
340d7aa2b8b44249a8e2f6421dc8c9d0_JaffaCakes118.dll windows:4 windows x86 arch:x86
d9aa3735bb167c469b64a35c89f7a44a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
inet_addr
gethostbyname
kernel32
CreateFileW
LocalAlloc
lstrcpyA
lstrcatA
GetComputerNameA
CloseHandle
WaitForSingleObject
CreateEventA
lstrlenA
GetTempPathA
lstrcmpiA
lstrcpynA
GlobalFree
GlobalAlloc
lstrcmpA
DeleteFileA
GetTempFileNameA
LocalFree
CreateFileA
LoadLibraryA
GetLastError
GetTickCount
FindClose
FindFirstFileA
FindNextFileA
RtlUnwind
VirtualFree
VirtualAlloc
Sleep
CreateThread
GetModuleFileNameA
Beep
ExitProcess
VirtualQuery
FreeLibrary
SetEvent
OpenEventA
MultiByteToWideChar
GetVersionExA
GetModuleHandleA
GetProcAddress
WriteFile
MoveFileA
user32
SendMessageA
EnumWindows
GetWindowThreadProcessId
PostMessageA
CharLowerA
wsprintfA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegCreateKeyA
RegEnumValueA
RegSetValueExA
RegQueryValueExA
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ