Static task
static1
Behavioral task
behavioral1
Sample
3b8028fdb3b2c0b208e1341c6ebcc914_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b8028fdb3b2c0b208e1341c6ebcc914_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3b8028fdb3b2c0b208e1341c6ebcc914_JaffaCakes118
-
Size
305KB
-
MD5
3b8028fdb3b2c0b208e1341c6ebcc914
-
SHA1
0a7d8bff47d36c581cd48d674d5b0e242a549ea6
-
SHA256
bf88222203a459393d63648080f8f52f71b445bdd25c44f248e5ac8971d20a24
-
SHA512
9345030b29250e6d4d5ed3cad3b9e41bde466e0d480c1a16cfbe114a0dbf99c3e68ae1d4d3a1ab3b163aaafc2fff920ce9874f521695bfb0fa994d6b0bb1a68a
-
SSDEEP
6144:QvywInpCNiTpDf2kHuCqec3JTzHDb06k3n01AnCAejVY/W7:QM6KpLJrc5Tq30JLjV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b8028fdb3b2c0b208e1341c6ebcc914_JaffaCakes118
Files
-
3b8028fdb3b2c0b208e1341c6ebcc914_JaffaCakes118.dll windows:5 windows x86 arch:x86
5bfc43717dec2e941a5aa4e06243294e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
QueryPerformanceCounter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
SetRect
shell32
ShellExecuteA
msvcr90
iswpunct
wininet
InternetOpenA
gdi32
CreateFontIndirectA
advapi32
RegOpenKeyA
Sections
_TEXT Size: - Virtual size: 431B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rmnet Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp2 Size: 302KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ