DevNetnet
Static task
static1
Behavioral task
behavioral1
Sample
4da27989d77e6c47b8a70df6c27ce3c9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4da27989d77e6c47b8a70df6c27ce3c9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4da27989d77e6c47b8a70df6c27ce3c9_JaffaCakes118
-
Size
128KB
-
MD5
4da27989d77e6c47b8a70df6c27ce3c9
-
SHA1
1f86e214e78b4a83e7c629618fc5873b968540f4
-
SHA256
3a010e0b0a6086b5da4dcf8d128ead2db689b712519db640865d7ca95181dc97
-
SHA512
21fa58e73a80194fbfec54fa598a2d87ba14c854af9984bf8e6f19ef4a66a2a54ea214d39ecaaab28fb4ff93aeb0b1e26fcd3dcb7ffec3dc5f01ecfdfdef66cd
-
SSDEEP
3072:wl14d7DeZUypikPwdujmafSKxDbGjZgy7UKBKQvifA:wmiSyBodu0Kuv1vm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4da27989d77e6c47b8a70df6c27ce3c9_JaffaCakes118
Files
-
4da27989d77e6c47b8a70df6c27ce3c9_JaffaCakes118.dll windows:4 windows x86 arch:x86
f61d533a1130fed7f2d8e3fc0cdbc4a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateEventA
OpenEventA
lstrlenW
EnterCriticalSection
CopyFileA
LoadLibraryA
UnmapViewOfFile
GetModuleFileNameA
SetLastError
CloseHandle
InterlockedDecrement
InterlockedIncrement
WaitForSingleObject
GetCommandLineA
CreateDirectoryA
Sleep
GetModuleHandleA
MapViewOfFile
LocalFree
GetProcAddress
InterlockedCompareExchange
GetLastError
lstrlenA
GetTickCount
ReleaseMutex
ExitProcess
LeaveCriticalSection
CreateProcessA
ole32
CreateBindCtx
CoCreateGuid
OleSetContainedObject
CoUninitialize
CoInitialize
OleCreate
user32
SendMessageA
DispatchMessageA
SetWindowLongA
DefWindowProcA
CreateWindowExA
GetMessageA
RegisterWindowMessageA
PostMessageA
TranslateMessage
PostQuitMessage
SetTimer
GetWindowLongA
GetClassNameA
FindWindowA
GetParent
DestroyWindow
GetSystemMetrics
KillTimer
oleaut32
SysFreeString
SysAllocStringLen
SysAllocString
shlwapi
StrStrIW
UrlUnescapeW
advapi32
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
Exports
Exports
Sections
.text Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ