Static task
static1
Behavioral task
behavioral1
Sample
374c6aa98fbffa16ad6008a85721e06a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
374c6aa98fbffa16ad6008a85721e06a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
374c6aa98fbffa16ad6008a85721e06a_JaffaCakes118
-
Size
77KB
-
MD5
374c6aa98fbffa16ad6008a85721e06a
-
SHA1
887fceeba418de586b7eaf9cd6f5d18c841ae81e
-
SHA256
439a8bc8d3e1ab5ea4acddc5773454a0d74235c310d28386641e9176b8161341
-
SHA512
35d786cf959ec96d3f88000d2ec7d85ae0b5e929d3817153ac2d9364a1c6d0765fd47619b49d04668c09f453cdf4f8da723b4bb7d4552823a1ecc114a3230da7
-
SSDEEP
1536:t+d7JO0T4x3fbUDpe3Fe5YuR79zsw3pMx34lyxbbQcL1ayZDllINim:61O3P73Q5Ya76w3pEjb/aPNim
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 374c6aa98fbffa16ad6008a85721e06a_JaffaCakes118
Files
-
374c6aa98fbffa16ad6008a85721e06a_JaffaCakes118.dll windows:4 windows x86 arch:x86
9784071ee5e320956833aa365debc1db
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
ExitProcess
FlushFileBuffers
GetCommandLineA
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapCreate
lstrcpyA
advapi32
OpenSCManagerW
ole32
CoFileTimeNow
CoGetMalloc
IsEqualGUID
IsValidIid
IsValidPtrIn
setupapi
SetupScanFileQueueA
olepro32
OleCreatePictureIndirect
OleCreatePropertyFrameIndirect
OleIconToCursor
OleTranslateColor
user32
VkKeyScanExA
RegisterDeviceNotificationW
Sections
.text Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ