Static task
static1
Behavioral task
behavioral1
Sample
4b6ffb7366e34dbfa301e431cd42d348_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b6ffb7366e34dbfa301e431cd42d348_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4b6ffb7366e34dbfa301e431cd42d348_JaffaCakes118
-
Size
14KB
-
MD5
4b6ffb7366e34dbfa301e431cd42d348
-
SHA1
76e809b372adf81ca852b074aec99ff412d59c63
-
SHA256
cc7ab95a97c108ddf12bca963ee4a362046700f232963eb42fdf50e9fa4ad036
-
SHA512
7e61fd606453d1150a62a118bdd370f28f9a4499a810ccb01cc4a3dcde6ade3c8118f2ffc72c9fceb84f090277e7a04d500e12d1e46ebc02c3f9da6bb24d8c48
-
SSDEEP
192:v12BZ1JeNS3bImIKmQfWfv0X4p+7dQ+6W2rfM48mKwEU766f3ftABUVJzN:v1YZONSLTI8fWfvL+92rfWg66P1nJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b6ffb7366e34dbfa301e431cd42d348_JaffaCakes118
Files
-
4b6ffb7366e34dbfa301e431cd42d348_JaffaCakes118.dll windows:4 windows x86 arch:x86
09666ed1b1d0dac0e26559f4084dd7f4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WideCharToMultiByte
GetLastError
GetCurrentProcess
TerminateProcess
OpenProcess
CreatePipe
FindClose
FindNextFileA
FindFirstFileA
GetLogicalDriveStringsA
CreateProcessA
CloseHandle
WriteFile
PeekNamedPipe
Sleep
CreateThread
ReadFile
user32
GetWindowThreadProcessId
GetWindowTextA
EnumWindows
advapi32
RegCloseKey
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueExA
msvcrt
_stricmp
realloc
free
atol
isdigit
malloc
sprintf
calloc
atoi
fwrite
fread
fclose
ftell
fseek
fopen
_initterm
_adjust_fdiv
_strlwr
ws2_32
connect
inet_addr
htons
WSAStartup
closesocket
gethostbyname
setsockopt
socket
select
recv
gethostname
send
inet_ntoa
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ