ControlProc
Static task
static1
Behavioral task
behavioral1
Sample
353fc90801047fe555fb6cd46799a849_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
353fc90801047fe555fb6cd46799a849_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
353fc90801047fe555fb6cd46799a849_JaffaCakes118
-
Size
25KB
-
MD5
353fc90801047fe555fb6cd46799a849
-
SHA1
632ec517dbc9595a0d64b57cc71f27af2c960e1d
-
SHA256
efa617d3bae0ca6f08efdea8f3ad79e61de4a1de8db568adc4d9c4c9ef2b002c
-
SHA512
6b36335141c1fa9567f4e07703d7f4afcb568a94585bd65a68401d24d68130b3f3a605744fde386955d50d76efbead7a2662a5df225ac92ef3477a1a43d133ba
-
SSDEEP
384:/Ktsy9mSHvB7Y8j9YHMQhXdSiLTbuVyp9xG4apnY1I0cn722Yt:ysC3TYhSiLvZx9ai1Il722w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 353fc90801047fe555fb6cd46799a849_JaffaCakes118
Files
-
353fc90801047fe555fb6cd46799a849_JaffaCakes118.dll windows:4 windows x86 arch:x86
ce0ab8262bc68491a107c4cb2781aff3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
SetLastError
lstrcmpiA
GlobalFree
GlobalAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetSystemInfo
CloseHandle
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
VirtualQuery
WriteProcessMemory
GetCurrentProcess
VirtualProtect
lstrcpyA
lstrlenA
GetVersionExA
GetLocalTime
lstrcpynA
GetProcessTimes
Sleep
CreateProcessA
GetSystemDirectoryA
GetLastError
CreateMutexA
lstrcatA
WriteFile
CreateFileA
ReadFile
GetFileSize
RaiseException
ExitProcess
GetCommandLineA
GetTickCount
DeleteFileA
SetFilePointer
GetSystemTime
RtlUnwind
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ