GetUpdateAtIndex
Static task
static1
Behavioral task
behavioral1
Sample
3de4a88a540fea0611e8349779adf053_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3de4a88a540fea0611e8349779adf053_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3de4a88a540fea0611e8349779adf053_JaffaCakes118
-
Size
172KB
-
MD5
3de4a88a540fea0611e8349779adf053
-
SHA1
410c511791bf12aba1f3e9cff496ec0a56789a44
-
SHA256
c70144a9635a1b952798aaabf539791be7a53e2f188bd8806df5b352b840d8f6
-
SHA512
567f0b1a5f19fc4e0d97a5461616dab02b007f9ddc76e3f6c1d9908004b0de9bb1b92142532e54b91ea61f48bf903fd11dc035e9682976ee004e5e8653d3860c
-
SSDEEP
3072:3kMM387AZKYi5xghLDiAw+GT2FHWd7hQRIeOgTygyWL7l/kh:0P0Aw/7ghvilYHOO4kyCS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3de4a88a540fea0611e8349779adf053_JaffaCakes118
Files
-
3de4a88a540fea0611e8349779adf053_JaffaCakes118.dll windows:4 windows x86 arch:x86
0f5dac69c9f17d3a0ae09d814feaa899
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateEventA
DeleteCriticalSection
ExitProcess
FileTimeToSystemTime
FindResourceA
FreeEnvironmentStringsW
GetACP
GetCommandLineA
GetEnvironmentStringsA
GetFileTime
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
HeapReAlloc
MultiByteToWideChar
ReadFile
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetLastError
SetUnhandledExceptionFilter
VirtualFree
msvcrt
fwprintf
_except_handler3
free
exit
wcslen
user32
TrackPopupMenu
MsgWaitForMultipleObjects
GetWindowRect
DrawMenuBar
ClientToScreen
BeginDeferWindowPos
SetPropA
oleaut32
RevokeActiveObject
SafeArrayAccessData
SafeArrayAllocDescriptor
SafeArrayCreate
OleLoadPicturePath
shlwapi
StrStrW
SHRegGetPathA
Exports
Exports
Sections
.text Size: 103KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ