SystemFunction01
Static task
static1
Behavioral task
behavioral1
Sample
39ab6a3bb333b1baf35e1ddfa55f7dbb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39ab6a3bb333b1baf35e1ddfa55f7dbb_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
39ab6a3bb333b1baf35e1ddfa55f7dbb_JaffaCakes118
-
Size
714KB
-
MD5
39ab6a3bb333b1baf35e1ddfa55f7dbb
-
SHA1
1ddda4fc567cecd5b7e62e8b3a2083528f13e5cc
-
SHA256
08dacc26af5d113bd29f746622ffeac7571fa3eb527f14bf1e427d4753860af9
-
SHA512
92eb775312ba9f7ede0a7b248895412c9436c0cba0f4567f3cf9a6804726b6f397f215ed99e5cb53c80123ac599f8f552d67b1eb793a8884d492c5dcd02dd02e
-
SSDEEP
6144:8hmfFy7pZU+0CgjEG7pFHZcdmsMliCKMXZKqOL6D06YySkYQKMDqtAu3NhgGC6k:8hmfYwCgzne4sF7dHx6YhvAuUGCn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39ab6a3bb333b1baf35e1ddfa55f7dbb_JaffaCakes118
Files
-
39ab6a3bb333b1baf35e1ddfa55f7dbb_JaffaCakes118.dll windows:4 windows x86 arch:x86
2be6e3c6867ef7a5bab10d6edd5662e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateEventA
CreateFileA
CreateFileMappingA
CreateThread
ExitProcess
ExpandEnvironmentStringsA
FindResourceA
GetLastError
GetLocalTime
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
MapViewOfFile
OpenFileMappingA
SetFilePointer
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
user32
wsprintfA
CallNextHookEx
CloseClipboard
CreateWindowExA
GetAsyncKeyState
GetClipboardData
GetClipboardViewer
GetCursorPos
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetForegroundWindow
GetKeyboardState
GetParent
GetWindowTextA
OpenClipboard
SetClipboardViewer
SetWindowLongA
SetWindowsHookExA
ToAscii
ws2_32
WSAStartup
closesocket
connect
htons
inet_addr
recv
send
socket
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 703KB - Virtual size: 702KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ