Activate
Static task
static1
Behavioral task
behavioral1
Sample
3462745476597da6df4178f4f9d32348_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3462745476597da6df4178f4f9d32348_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3462745476597da6df4178f4f9d32348_JaffaCakes118
-
Size
34KB
-
MD5
3462745476597da6df4178f4f9d32348
-
SHA1
d1eca55238dd4097021377e23de33be35375dab7
-
SHA256
05e5afbbf56582d3177af701207a0508eaf364e41482f579d18042d5e8c43af3
-
SHA512
db5c9a0a02851590d98c4b627acf07ba8f51cae220f3e09628f118625ec19c687e13c1be7ce9fec430d1836f3cbc8673f78ea989e1d03b33246bd4aa4e8f2819
-
SSDEEP
768:uJhCxqjQq8EpNzVF1FcDOdMVYN1h2NnXbgRAFIbb223Mtrc7j4VWd7JV8JfUc9EM:uAgQq8EpNzVF1FgOdMVYN1h2NnXQlb2o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3462745476597da6df4178f4f9d32348_JaffaCakes118
Files
-
3462745476597da6df4178f4f9d32348_JaffaCakes118.dll windows:4 windows x86 arch:x86
71adbb930898f23fbe6076f864b7ad2f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
inet_addr
gethostbyname
kernel32
CreateFileW
LocalAlloc
lstrcpyA
lstrcatA
GetComputerNameA
CloseHandle
WaitForSingleObject
CreateEventA
lstrlenA
GetTempPathA
lstrcmpiA
lstrcpynA
GlobalFree
GlobalAlloc
lstrcmpA
DeleteFileA
GetTempFileNameA
LocalFree
FindFirstFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
RtlUnwind
LoadLibraryA
GetLastError
GetTickCount
FindNextFileA
MoveFileA
Sleep
CreateThread
GetModuleFileNameA
ExitProcess
VirtualQuery
FreeLibrary
SetEvent
OpenEventA
MultiByteToWideChar
GetVersionExA
GetModuleHandleA
GetProcAddress
FindClose
CreateFileA
user32
SendMessageA
EnumWindows
GetWindowThreadProcessId
PostMessageA
CharLowerA
wsprintfA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegCreateKeyA
RegEnumValueA
RegSetValueExA
RegQueryValueExA
Exports
Exports
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ