wkaayzekf
Static task
static1
Behavioral task
behavioral1
Sample
3c3f23795a29e2a01a248bc19cd8488c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c3f23795a29e2a01a248bc19cd8488c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3c3f23795a29e2a01a248bc19cd8488c_JaffaCakes118
-
Size
594KB
-
MD5
3c3f23795a29e2a01a248bc19cd8488c
-
SHA1
7ee1fa14961b11511d1dfbfed9048294cc195f72
-
SHA256
84b1a51bba998571155362603a7ea2bc6193b31caa949a87e84bf3d2ef2f2818
-
SHA512
9a63ecb789eac2141f450fd4677ec97c8dd7fafbda55bf94483885bc0b70de5ad51540e340528f3e729888fc6f34da8cf93094b931e0c90878fdc2b229694d53
-
SSDEEP
6144:XgzjAM5KoGi9nzxTxf/XVEODIJOk4haoX/BKeHVjOvWGCs57WkzYtWUIHcKaGcsD:XgoM5Ko3RZDIJOvZ0i7ttIBpKvS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c3f23795a29e2a01a248bc19cd8488c_JaffaCakes118
Files
-
3c3f23795a29e2a01a248bc19cd8488c_JaffaCakes118.dll windows:4 windows x86 arch:x86
76617e1a081d29216f976c00e1630357
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
MessageBoxA
wsprintfA
CharNextA
LoadStringA
CharPrevA
MessageBoxExA
advapi32
GetSidLengthRequired
FreeSid
GetSecurityDescriptorDacl
RegEnumValueA
SetFileSecurityA
SetSecurityDescriptorDacl
GetSidSubAuthority
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegOpenKeyExA
RegCloseKey
InitializeSid
RegQueryValueExA
AllocateAndInitializeSid
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Exports
Exports
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 532KB - Virtual size: 531KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ