Static task
static1
Behavioral task
behavioral1
Sample
5db48b38f8482bb9653c9245af01c13a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5db48b38f8482bb9653c9245af01c13a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5db48b38f8482bb9653c9245af01c13a_JaffaCakes118
-
Size
7KB
-
MD5
5db48b38f8482bb9653c9245af01c13a
-
SHA1
0d5de84279734d00f67293360dc74a38e8ca2a57
-
SHA256
2296c41f05c909e6d910d30296d1762f73cd9e6529e6918a44e300f31d6c6209
-
SHA512
17502dd88b5d758e5fc2cb6053d8e6a77564f3f92d0661683b9c4492c3c8ad90936338476db37c4e911cd46189f30e256586f3295319cb61dc600fa2f8e29f58
-
SSDEEP
96:7iXt7nq6CdejrChwJC7O8eq2g/00O0m0VHX8af4x85:7iXZQwahcC7O8eq2gF3j4x85
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5db48b38f8482bb9653c9245af01c13a_JaffaCakes118
Files
-
5db48b38f8482bb9653c9245af01c13a_JaffaCakes118.dll windows:4 windows x86 arch:x86
625b67f5f1394a1cddb75d2138b9bd93
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ReadProcessMemory
WriteProcessMemory
IsBadReadPtr
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCurrentProcess
VirtualProtectEx
GetModuleFileNameA
OpenMutexA
CreateMutexA
CreateThread
GetLocalTime
SetLocalTime
Sleep
user32
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
advapi32
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
msvcrt
_stricmp
_adjust_fdiv
malloc
_initterm
free
strrchr
strncpy
sprintf
??2@YAPAXI@Z
strlen
memcpy
_strlwr
wininet
InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ