Static task
static1
Behavioral task
behavioral1
Sample
3435db5b82cc056c25a42409da4925d8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3435db5b82cc056c25a42409da4925d8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3435db5b82cc056c25a42409da4925d8_JaffaCakes118
-
Size
160KB
-
MD5
3435db5b82cc056c25a42409da4925d8
-
SHA1
30c40c95446089c273feefd720e56f93d2176bd9
-
SHA256
03ada3449d8fe2b3ac31eed37d57bfed19a5e65ca94b8afbc6ddfec074cc6195
-
SHA512
25bc2a750b65c598b2465747a69cdc2ee4c6dc4035eb024b56b18b00e190d4cd0058cec429c9310592b8c8b05baaa88dc65dadb41f9a9e128c23a705806d665b
-
SSDEEP
3072:uPSClhT5Znv3SKdetohMqqDLy/A3leb3StwBI3:FqZ9GqqDLuA3YC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3435db5b82cc056c25a42409da4925d8_JaffaCakes118
Files
-
3435db5b82cc056c25a42409da4925d8_JaffaCakes118.dll windows:4 windows x86 arch:x86
d48caa8fcff65331dfa87c12258c8145
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
CloseHandle
SetEvent
LCMapStringW
WaitForSingleObject
GetProcessHeap
lstrlenW
LocalFree
GetVersionExW
lstrcmpW
GetProcAddress
FreeLibrary
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleHandleW
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
RegisterWaitForSingleObject
GetCommandLineW
CreateEventW
LoadLibraryA
GetStringTypeA
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
HeapAlloc
IsBadCodePtr
VirtualProtect
GetWindowsDirectoryW
FormatMessageW
GetCommandLineA
GetCurrentThreadId
IsBadWritePtr
IsBadReadPtr
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW
user32
IsWindow
ChangeDisplaySettingsW
SetDlgItemTextW
SendMessageW
GetDlgItem
LoadIconW
DestroyIcon
MessageBoxW
DialogBoxParamW
GetWindowLongW
EndDialog
advapi32
RegOpenKeyW
IsValidSecurityDescriptor
GetSecurityDescriptorLength
RegCloseKey
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ