e:\work\malwar\hard\EngineDll\release\EngineDll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
45759b70d1a4f0657b6f7850a29ca4a4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45759b70d1a4f0657b6f7850a29ca4a4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
45759b70d1a4f0657b6f7850a29ca4a4_JaffaCakes118
-
Size
52KB
-
MD5
45759b70d1a4f0657b6f7850a29ca4a4
-
SHA1
c7ad1f3ec585913932627de34c2a9d7fa1a9cb5a
-
SHA256
b9135c2bd3a7f8a97fa5b4e4638a504182fd6fc6d471d666a1cfab7a898c07c8
-
SHA512
63c0ede47f13d43555dd08dc15ae2cb53326bbe1a9a8078a79dedb3bef841896c2d6d0b2e09573111a5e2ee1cc9cde8a47632b6bd3d7a996207feffac4523209
-
SSDEEP
768:eHhRXMewRZMSCd03QoDFMSYHPvHRtFOOCtUo:eBim2DeHPZMtUo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45759b70d1a4f0657b6f7850a29ca4a4_JaffaCakes118
Files
-
45759b70d1a4f0657b6f7850a29ca4a4_JaffaCakes118.dll windows:4 windows x86 arch:x86
1952e67d214012a353cd9213009c68cc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
wininet
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
InternetReadFile
InternetOpenUrlA
HttpQueryInfoA
kernel32
InterlockedDecrement
HeapSize
GetThreadContext
SetThreadContext
WaitForSingleObject
VirtualFree
WriteFile
Sleep
ReadProcessMemory
CreateProcessA
GetProcAddress
VirtualAlloc
VirtualProtectEx
VirtualAllocEx
GetModuleHandleA
CreateMutexA
ReleaseMutex
CloseHandle
WriteProcessMemory
ResumeThread
CreateThread
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
HeapDestroy
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
Exports
Exports
WaitForExit
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ