Static task
static1
Behavioral task
behavioral1
Sample
42f903f92ed70f352a935d13993d3d40_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42f903f92ed70f352a935d13993d3d40_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
42f903f92ed70f352a935d13993d3d40_JaffaCakes118
-
Size
750KB
-
MD5
42f903f92ed70f352a935d13993d3d40
-
SHA1
632fe6f05fe9042c82bed8a8ea593b0ddf8735a8
-
SHA256
9b70f4222ea46fcc78d2fe022d7db0fd247fb71dfa13a36f1755dbded572b2ba
-
SHA512
30e3373308ba57f9b7efebd2878a685e0c1ff7db59c0153fc8aa0f193748199dd9bf0df06cb462997013991eeefe3f635aaf3841f69e22432d3eff6b817e7550
-
SSDEEP
12288:5qslboAFyk5tM3sP2I42s4hPKDsyNGhVL8C6Gi9qbPurGN6HoYEf8cBRYVZ:5qIdVOy17s4GrN0VZcGN6HoVRYH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42f903f92ed70f352a935d13993d3d40_JaffaCakes118
Files
-
42f903f92ed70f352a935d13993d3d40_JaffaCakes118.dll windows:4 windows x86 arch:x86
07d68a5df3f601d1b4b3d686a145dd77
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCommandLineA
ExitProcess
GetStartupInfoA
BeginUpdateResourceW
LoadLibraryW
LCMapStringA
DeleteTimerQueueTimer
HeapSize
UnregisterConsoleIME
ClearCommBreak
GetVDMCurrentDirectories
FatalAppExitW
LocalAlloc
UnregisterConsoleIME
FindNextChangeNotification
lstrcpynW
GlobalFlags
WriteConsoleA
GlobalDeleteAtom
SetConsoleMenuClose
GetBinaryTypeA
GetConsoleWindow
CloseConsoleHandle
OpenWaitableTimerA
WriteConsoleOutputCharacterW
ResumeThread
FoldStringA
WritePrivateProfileStringW
DnsHostnameToComputerNameW
GetFileSizeEx
OpenMutexA
GetCommState
WaitForDebugEvent
GetSystemPowerStatus
FoldStringA
FlushInstructionCache
CreateTimerQueue
PrivCopyFileExW
Sections
code Size: 4KB - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 739KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ