_StartRun@16
Static task
static1
Behavioral task
behavioral1
Sample
35a26acd3983201ecddec5987f11d148_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35a26acd3983201ecddec5987f11d148_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
35a26acd3983201ecddec5987f11d148_JaffaCakes118
-
Size
24KB
-
MD5
35a26acd3983201ecddec5987f11d148
-
SHA1
23f74714dab7935e4aab2fec3c65f922c5b3ebf5
-
SHA256
bf4d5471be9c3e0e7c0f41492766251e4c71db370ef1abc2e422b4530505aede
-
SHA512
16cb07694d3ece52c4693d3c4357212be2d9c6b46718ff649e82f2f182b9415c8103fbe3dfadcef6f021f5d8dd4aa47d5c4ec67134cdd220a56b7c5a498cfbb2
-
SSDEEP
96:QgbaiG+YHcIc8Y3ZkV4gW4QlQZLvnb7BL/h75kOPnR1SuzaGMj+kjkVspR0GiPYu:Y+DIcZgWTwdNnRT8+RtGiPYafaZDl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35a26acd3983201ecddec5987f11d148_JaffaCakes118
Files
-
35a26acd3983201ecddec5987f11d148_JaffaCakes118.dll windows:4 windows x86 arch:x86
d5b3f542469664d755b1ba58272a3f97
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
SetFileTime
CreateFileA
SystemTimeToFileTime
GetSystemTime
GetFileTime
DeleteFileA
GetSystemDirectoryA
user32
KillTimer
DefWindowProcA
SetTimer
SetWindowPos
SetWindowLongA
GetWindowLongA
CreateWindowExA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
WaitMessage
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
PostQuitMessage
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
wininet
InternetQueryOptionA
InternetCheckConnectionA
msvcrt
_adjust_fdiv
malloc
_initterm
free
fwrite
sprintf
fseek
fopen
fread
fclose
isalnum
isalpha
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 362B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ