Static task
static1
Behavioral task
behavioral1
Sample
47b1b6fc3cd7cad19fa4246a4d93b20b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47b1b6fc3cd7cad19fa4246a4d93b20b_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
47b1b6fc3cd7cad19fa4246a4d93b20b_JaffaCakes118
-
Size
15KB
-
MD5
47b1b6fc3cd7cad19fa4246a4d93b20b
-
SHA1
03e24a66c7fe334ab5baaffdaf34acf646575534
-
SHA256
9468d3595392d63baa6bef79880560321951fe24496e048cdda8731e0477081b
-
SHA512
50726c8e9eb74e2f5f645f049a19a12b6dc9ce598d910c635f6c90ab2c7b4beb3a758f41233cc96f8d935a5f51f4cd6e0916630e52a5cb9592e2d17cb1fa5af1
-
SSDEEP
384:YgjRWX7tAwvXqJSWQZoUT0/SVNtLLsJOJUm61i7V:YGk7tAmaJtY/GGNdsoS11ix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47b1b6fc3cd7cad19fa4246a4d93b20b_JaffaCakes118
Files
-
47b1b6fc3cd7cad19fa4246a4d93b20b_JaffaCakes118.dll windows:4 windows x86 arch:x86
62b73c60cbce29832085ad601bacae3e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
CloseHandle
WriteFile
SetFilePointer
CreateFileA
CompareStringA
IsBadReadPtr
LoadLibraryA
GetModuleHandleA
ReadFile
GetFileSize
GetModuleFileNameA
GetProcessHeap
GetCurrentProcess
OpenProcess
GetCurrentProcessId
GetLastError
CreateMutexA
OpenMutexA
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
GetProcAddress
lstrlenA
CreateThread
DeleteFileA
GetSystemDirectoryA
FreeLibrary
HeapAlloc
Sleep
GetTickCount
RtlUnwind
user32
TranslateMessage
DispatchMessageA
GetMessageA
KillTimer
FindWindowA
GetWindowTextA
wsprintfA
SetTimer
GetWindowThreadProcessId
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
wininet
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
shlwapi
PathFileExistsA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ