CRLcrt32
Static task
static1
Behavioral task
behavioral1
Sample
4865ebe037f7e552870ac638a6e1f87e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4865ebe037f7e552870ac638a6e1f87e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4865ebe037f7e552870ac638a6e1f87e_JaffaCakes118
-
Size
128KB
-
MD5
4865ebe037f7e552870ac638a6e1f87e
-
SHA1
ab753e4c04f0f1029051ed8a11c819de039e0cfb
-
SHA256
e41242d4638caec329ccb420c4ea6f652563eab206c5dbc105fec993491dbe6f
-
SHA512
220b14c024b40c7dca4690dab92f16aa2cc4459b7e1f8de7eb16f5d9130a42261949286813c69c19c1ad47e79a8ba325aad65ccb11da73b2e6bf81eabeb490ae
-
SSDEEP
3072:A8oNrcrRdbnOjHQgQlzYs6lsXM9ZUro1vG681:A8+gRdbnOjHQgQlUHlsGqsF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4865ebe037f7e552870ac638a6e1f87e_JaffaCakes118
Files
-
4865ebe037f7e552870ac638a6e1f87e_JaffaCakes118.dll windows:4 windows x86 arch:x86
e5922e59da9a5ade709c97dd54699166
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
GetCommandLineA
lstrlenA
CreateProcessA
GetModuleHandleA
WaitForSingleObject
CreateDirectoryA
ReleaseMutex
Sleep
CreateEventA
InterlockedDecrement
GetProcAddress
LeaveCriticalSection
InterlockedIncrement
ExitProcess
InterlockedCompareExchange
MapViewOfFile
SetLastError
GetModuleFileNameA
EnterCriticalSection
LocalFree
GetTickCount
LoadLibraryA
OpenEventA
CopyFileA
lstrlenW
UnmapViewOfFile
GetLastError
ole32
CoUninitialize
CoInitialize
OleCreate
CoCreateGuid
CreateBindCtx
OleSetContainedObject
user32
GetClassNameA
CreateWindowExA
SetTimer
TranslateMessage
GetWindowLongA
PostQuitMessage
RegisterWindowMessageA
DefWindowProcA
GetMessageA
DestroyWindow
FindWindowA
SetWindowLongA
DispatchMessageA
SendMessageA
PostMessageA
GetParent
KillTimer
GetSystemMetrics
oleaut32
SysFreeString
SysAllocString
SysAllocStringLen
shlwapi
UrlUnescapeW
StrStrIW
advapi32
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
Exports
Exports
Sections
.text Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ