?Dll1Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
4747a9b88b63bbb1ba5ae83cbfa01915_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4747a9b88b63bbb1ba5ae83cbfa01915_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4747a9b88b63bbb1ba5ae83cbfa01915_JaffaCakes118
-
Size
68KB
-
MD5
4747a9b88b63bbb1ba5ae83cbfa01915
-
SHA1
02f0d4b2abf9885721c59f097c058f2563e951ef
-
SHA256
d1bd7a2994dc6d067b467182767e87488b043418a8f614a897970af59804566d
-
SHA512
032cf8cb370650e6e3906efc23e607d3c3ffd0ca113c6b367cfb81acab0643a62c0601c7f7316693142105f8a8fda72da10cac4b69cbd9e22ededa1ea36e58c0
-
SSDEEP
768:rFyj1Tuh8mJXLLNU2TmQH9KE4jqwa8ffNAUCLzPFBK2qgqm+:Yluh84LNU2TNH9KHqwaw1mLY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4747a9b88b63bbb1ba5ae83cbfa01915_JaffaCakes118
Files
-
4747a9b88b63bbb1ba5ae83cbfa01915_JaffaCakes118.dll windows:4 windows x86 arch:x86
7b1b6e42852a5aa85c8190dda93c3505
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
msvcrt
strtol
sscanf
fopen
fseek
ftell
fgetc
fread
fclose
memcpy
memset
time
sprintf
strcmp
strtok
strstr
strcat
printf
strcpy
strlen
kernel32
FreeLibrary
LocalAlloc
lstrcmpiA
CreateToolhelp32Snapshot
Process32First
Process32Next
TerminateProcess
OpenProcess
VirtualAllocEx
WriteProcessMemory
GetModuleHandleA
CreateRemoteThread
GetVersionExA
GetModuleFileNameA
Sleep
SetSystemTime
GetSystemTime
CloseHandle
GetFileSize
CreateFileA
WinExec
lstrcpyA
GetFileAttributesA
lstrcatA
GetSystemDirectoryA
lstrlenA
DeleteFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
CreateThread
GetProcAddress
LoadLibraryA
WriteFile
user32
wsprintfA
CharUpperA
FindWindowExA
PostMessageA
ShowWindow
advapi32
CloseServiceHandle
QueryServiceConfigA
ChangeServiceConfigA
OpenServiceA
QueryServiceStatus
ControlService
DeleteService
OpenSCManagerA
CreateServiceA
LookupAccountSidA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
GetTokenInformation
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ole32
CoCreateGuid
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ