fx
Static task
static1
Behavioral task
behavioral1
Sample
611d52102a31f35c68562bc3971481be_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
611d52102a31f35c68562bc3971481be_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
611d52102a31f35c68562bc3971481be_JaffaCakes118
-
Size
12KB
-
MD5
611d52102a31f35c68562bc3971481be
-
SHA1
13cc6d38e72f660feddc0ade129742a69d686243
-
SHA256
0c1a8808a9ca8815fd43100d87bef8aa3afb7bfeef1ff9a90c59247a4f696f52
-
SHA512
7a8316106674d791b67645710c141387401f801cd376dd954877978dc9aa8739027ceb11fdd8bb3e88b02d6e038821fbfa0e175ce71d4db55070a505d752e383
-
SSDEEP
192:E2KMA4zjf42047XgoDMpfKWBcDOa7fB1aeH37Nc4ccE:E2K+X420GwoDMTyZ1RHLN1cc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 611d52102a31f35c68562bc3971481be_JaffaCakes118
Files
-
611d52102a31f35c68562bc3971481be_JaffaCakes118.dll windows:4 windows x86 arch:x86
2f572d9b4e37c152151c6178cdff15b9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
ReadProcessMemory
GetCurrentProcess
IsBadReadPtr
WriteProcessMemory
GetCommandLineA
GlobalFree
GlobalLock
GlobalAlloc
GetPrivateProfileStringA
CreateThread
ResumeThread
VirtualProtectEx
Sleep
user32
SetWindowsHookExA
ToUnicode
GetAsyncKeyState
CallNextHookEx
GetKeyboardState
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
msvcrt
strcat
_adjust_fdiv
malloc
_initterm
free
fopen
fread
fclose
memcpy
strcpy
strrchr
??2@YAPAXI@Z
strcmp
_stricmp
sprintf
strncpy
strstr
strlen
memset
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdt Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ