Static task
static1
Behavioral task
behavioral1
Sample
39bcb29b5a25c777dcf94becc275bb6b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39bcb29b5a25c777dcf94becc275bb6b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
39bcb29b5a25c777dcf94becc275bb6b_JaffaCakes118
-
Size
19KB
-
MD5
39bcb29b5a25c777dcf94becc275bb6b
-
SHA1
fcaa73708063a26e26800e98eda1434c4e5fc0aa
-
SHA256
497441173e9be59a84d87db96dd421784c3d302610c32fbbb45b18561c0ca0e1
-
SHA512
32e2078f9112f962784971c341b2ab61d4e6de0014e3c3e72d8124363cb1d377183ff56c9de244232dc03a8a5b98bd9dc329e67498bb8993e1e917dc2bd10bac
-
SSDEEP
384:7JDRECynF/hFTlGsoI6BXs8jPY10JpJgLa0MpYm:LECK9Tws4Xs8bJgLa1+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39bcb29b5a25c777dcf94becc275bb6b_JaffaCakes118
Files
-
39bcb29b5a25c777dcf94becc275bb6b_JaffaCakes118.dll windows:4 windows x86 arch:x86
fcfa2502096423fd052b6943d8266757
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
shell32
ord680
advapi32
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegNotifyChangeKeyValue
user32
UnhookWindowsHookEx
SetWindowsHookExA
SetWindowTextA
GetParent
GetFocus
GetClassNameA
FindWindowA
EnumChildWindows
CharLowerBuffA
CallWindowProcA
CallNextHookEx
wsprintfA
GetWindowTextA
kernel32
FreeLibrary
GetModuleFileNameA
lstrcpynA
lstrlenA
lstrcpyA
lstrcmpA
lstrcatA
VirtualProtect
VirtualFree
VirtualAlloc
Sleep
RtlFillMemory
LoadLibraryA
ExitThread
GetVolumeInformationA
GetTempPathA
GetSystemInfo
GetProcAddress
CloseHandle
CreateThread
GetModuleHandleA
shlwapi
StrToIntA
StrStrA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ