Static task
static1
Behavioral task
behavioral1
Sample
3ba698fa714ac69aeecc0ed39b3e4136_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ba698fa714ac69aeecc0ed39b3e4136_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3ba698fa714ac69aeecc0ed39b3e4136_JaffaCakes118
-
Size
27KB
-
MD5
3ba698fa714ac69aeecc0ed39b3e4136
-
SHA1
34efdbc47fa2c824cd2009c42f684c0ad6a26abd
-
SHA256
cf2eadbf6c5ebd08f3ea187ef83d08f222ee047f6f343e8aeb0e0c3316b4cf18
-
SHA512
b04d544efc4aa1c5b3b60ec3e8600365240992305e2928a3dba3b10e629f862874033ec5d3af4ad70f040414c43d63faa4dd6fe216f18a5b76ec77a5b6aa1d10
-
SSDEEP
384:fuWSoSAsBmDBCIfaCCOncUchVIMAxSDxC93TTv/He8zdTyBsyqAIZhgS/rPYiq9:fUrBmJiCCOEVn4SDxs33WsyqAggkPe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ba698fa714ac69aeecc0ed39b3e4136_JaffaCakes118
Files
-
3ba698fa714ac69aeecc0ed39b3e4136_JaffaCakes118.dll windows:4 windows x86 arch:x86
7d22a4803f3418280028d45a76571b5b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualQueryEx
WideCharToMultiByte
Process32First
CreateToolhelp32Snapshot
GetFileSize
ReadFile
SetFilePointer
GetModuleHandleA
VirtualProtect
GetProcessHeap
HeapAlloc
ReadProcessMemory
LoadLibraryA
OpenMutexA
GetFileAttributesW
Process32Next
GlobalAlloc
CreateFileA
WriteFile
CloseHandle
GlobalFree
LocalAlloc
GetTempPathA
GetCurrentProcessId
OpenProcess
TerminateProcess
GetCurrentProcess
Sleep
GetModuleFileNameA
OutputDebugStringA
CreateThread
msvcrt
_strcmpi
atoi
??3@YAXPAX@Z
wcslen
??2@YAPAXI@Z
wcsncat
wcscpy
wcsstr
__CxxFrameHandler
_except_handler3
__dllonexit
_onexit
_initterm
_adjust_fdiv
_stricmp
_strdup
_strlwr
strrchr
memcpy
strcat
fopen
fgets
fclose
strlen
strstr
strncpy
malloc
memset
strcpy
free
sprintf
wininet
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetOpenUrlA
InternetReadFile
HttpQueryInfoA
FtpPutFileA
gdi32
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
CreateDCA
GetObjectA
GetDIBits
user32
wvsprintfA
GetForegroundWindow
GetClassNameA
GetWindow
GetDC
GetSystemMetrics
GetWindowTextW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ