ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
4152a3e330a739ec465a6afaf8767962_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4152a3e330a739ec465a6afaf8767962_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
4152a3e330a739ec465a6afaf8767962_JaffaCakes118
-
Size
34KB
-
MD5
4152a3e330a739ec465a6afaf8767962
-
SHA1
0c46e106a0a9917929777efcdefc59ed3cfd5413
-
SHA256
257c5b8e953374fc9f2f29e04a31dc9632a6d10969091d929d8fe5d6ea44383e
-
SHA512
3d30f0446f62378b431160a10dc3af7ffc5f01c42edd77a0b3c3a18e8789cca8c58836fd010153ebd1f05183c093136234cef18acd6f7352eb79ae4ddc1a3b95
-
SSDEEP
384:+quvae2LaF/LHc8Gnxi72/l+vB55jA88r+2PXN9:lxLKL88GxA2gvT5jA88VPXN9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4152a3e330a739ec465a6afaf8767962_JaffaCakes118
Files
-
4152a3e330a739ec465a6afaf8767962_JaffaCakes118.dll windows:4 windows x86 arch:x86
7b39805e5fefe28d88453756da6153ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteFileA
Sleep
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
DisableThreadLibraryCalls
CreateThread
FreeLibraryAndExitThread
ExitProcess
ReadFile
SetFilePointer
FreeLibrary
GetSystemDirectoryA
GetStartupInfoA
WaitForSingleObject
VirtualFreeEx
CreateRemoteThread
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
lstrlenW
OpenProcess
MultiByteToWideChar
lstrcmpA
GetVersion
DeviceIoControl
GetCurrentProcessId
GetProcAddress
lstrcpyA
lstrcatA
lstrlenA
LoadLibraryA
CreateProcessA
user32
wsprintfA
CharUpperA
advapi32
RegOpenKeyExA
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
RegCloseKey
DeleteService
OpenSCManagerA
ControlService
wininet
InternetReadFile
HttpQueryInfoA
InternetSetOptionA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
ws2_32
inet_ntoa
gethostbyname
WSAStartup
inet_addr
shlwapi
SHDeleteKeyA
msvcrt
_adjust_fdiv
malloc
_initterm
free
_except_handler3
strstr
strchr
atoi
__CxxFrameHandler
??2@YAPAXI@Z
strrchr
sprintf
??3@YAXPAX@Z
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 746B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ