Static task
static1
Behavioral task
behavioral1
Sample
3a32791799f0353ebea18a8894f1bf11_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a32791799f0353ebea18a8894f1bf11_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3a32791799f0353ebea18a8894f1bf11_JaffaCakes118
-
Size
144KB
-
MD5
3a32791799f0353ebea18a8894f1bf11
-
SHA1
80f0a1ab840c8bdebdb37d99681db2f604cf1997
-
SHA256
107ea17644c34ab97b4f1ef533968a66da148a7b6c5c04ee0db08a9fb4cdd6a6
-
SHA512
8c69ed96c70d7b55915a54cb76818cdcab8950f4b30a716e5a7202e9ffba2511ed913388ecffd2db0d1ab58f961d0bdfb10eec7fc41ba816805d3b6a9632a4ca
-
SSDEEP
3072:qCIHdny44be1xXeXUFHZDa7taxsg0NxilsHxoxMqqDLy/led:Wly44be1peX0Du35NxRHvqqDLu+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a32791799f0353ebea18a8894f1bf11_JaffaCakes118
Files
-
3a32791799f0353ebea18a8894f1bf11_JaffaCakes118.dll windows:4 windows x86 arch:x86
b0cae4f82eb32ce9b393097bd6e128fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalHandle
MulDiv
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
lstrlenA
lstrcpynW
lstrlenW
lstrcatW
Sleep
GetFullPathNameW
CreateFileW
GetModuleHandleA
GetVersionExA
VirtualAlloc
GetSystemInfo
VirtualQuery
InterlockedDecrement
lstrcmpiA
SetUnhandledExceptionFilter
lstrcatA
lstrcpynA
lstrcpyA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
SizeofResource
LoadResource
InterlockedExchange
GetTempFileNameW
GetTempPathW
InterlockedCompareExchange
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
GetStringTypeW
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
HeapAlloc
CloseHandle
GetOverlappedResult
MultiByteToWideChar
lstrcmpW
lstrcpyW
ResetEvent
GetCurrentThreadId
WriteFile
VirtualProtect
HeapDestroy
GetCommandLineA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
RtlUnwind
GetVersion
ExitProcess
GetEnvironmentVariableA
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
user32
CharPrevA
SetRectEmpty
IsRectEmpty
EnableWindow
wsprintfW
SendMessageW
CheckDlgButton
SetDlgItemInt
GetDlgItem
CharNextA
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyW
RegQueryValueW
RegCloseKey
RegOpenKeyW
RegEnumValueA
ole32
CreateBindCtx
MkParseDisplayName
CLSIDFromProgID
CoCreateInstanceEx
CoTaskMemAlloc
CoTaskMemFree
CoGetMalloc
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ