Static task
static1
Behavioral task
behavioral1
Sample
3977c353974fd620af7a7abe4dadfb6a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3977c353974fd620af7a7abe4dadfb6a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3977c353974fd620af7a7abe4dadfb6a_JaffaCakes118
-
Size
120KB
-
MD5
3977c353974fd620af7a7abe4dadfb6a
-
SHA1
023d2b281aa055e051fef53cc79cfdaaf3dbd702
-
SHA256
8e085b2c79ebb16125fc2ed64188d28dbc04d5b79d3dd709de5a90803a17cfce
-
SHA512
a4fc15c6caad6fb686a8b5340284595b6f779b94fe597febab2a88a9f0f737f852adef012942046ffa3a28390133cff7ec250987be51fe8bda5af8cc4dcd2f2d
-
SSDEEP
3072:QjzL6HXi6k17iTGrFX63rpO4I/N8h/f0szp9:YrX63rlI/N8hf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3977c353974fd620af7a7abe4dadfb6a_JaffaCakes118
Files
-
3977c353974fd620af7a7abe4dadfb6a_JaffaCakes118.dll windows:4 windows x86 arch:x86
ffb7c37621561843f5f4a351487ea43d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
LoadLibraryW
FreeLibrary
GetProcessHeap
lstrcmpiW
CreateEventW
CreateThread
GetModuleHandleW
Sleep
InterlockedExchange
CloseHandle
WaitForMultipleObjects
LoadLibraryExW
DisableThreadLibraryCalls
GetWindowsDirectoryW
SetUnhandledExceptionFilter
SearchPathW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
InterlockedIncrement
lstrlenA
GetModuleFileNameA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
VirtualProtect
CreateProcessW
GetCommandLineA
user32
PostThreadMessageW
LoadStringW
CharNextA
MessageBeep
advapi32
RegDeleteKeyA
RegQueryInfoKeyA
ole32
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
msvcrt
_errno
_adjust_fdiv
_XcptFilter
_callnewh
memcpy
_cexit
_ismbblead
exit
_acmdln
fflush
malloc
free
_except_handler3
memset
_amsg_exit
_initterm
_wtol
_vsnwprintf
_wcsicmp
_CxxThrowException
fclose
fprintf
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ