Static task
static1
Behavioral task
behavioral1
Sample
654e535c69dda64983d3e40bb18cdc42_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
654e535c69dda64983d3e40bb18cdc42_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
654e535c69dda64983d3e40bb18cdc42_JaffaCakes118
-
Size
413KB
-
MD5
654e535c69dda64983d3e40bb18cdc42
-
SHA1
dd4cfaf19b532c29e4c3109d48bb2205594d9d12
-
SHA256
b6bde92e8c5a03136d76dad752e632df9e6ce471ee63b020fbcc3c84008c1739
-
SHA512
250df4312f4a968dad0d5298e8ae2f38de6ba0de7e57569bc001a6ae68bdcf656787c58865e56a1649af69f6e054e9918a48039b358c876c8350106302d550f1
-
SSDEEP
6144:uQnZsTv4X6awUwo3VW2ZhtPJWzjXfogux/p0Rvf9smZiAq4RZvwkeGYtp:3ZjXxwUV3V3t6jXfogImXamZiAqPkC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 654e535c69dda64983d3e40bb18cdc42_JaffaCakes118
Files
-
654e535c69dda64983d3e40bb18cdc42_JaffaCakes118.dll windows:4 windows x86 arch:x86
54d09f6b767377835befbd22f0876982
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_adjust_fdiv
getenv
free
exit
_initterm
fprintf
realloc
longjmp
_iob
_setjmp3
malloc
sscanf
_except_handler3
_purecall
__CxxFrameHandler
_snprintf
ws2help
WahCloseThread
wininet
InternetCrackUrlW
kernel32
GlobalAddAtomA
UnhandledExceptionFilter
GetTickCount
TerminateProcess
GetCurrentProcessId
Beep
InterlockedIncrement
QueryPerformanceCounter
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
InterlockedDecrement
LeaveCriticalSection
DeleteCriticalSection
GetLastError
GlobalDeleteAtom
GetCurrentThreadId
SetUnhandledExceptionFilter
lstrlenA
ntdll
NtAllocateVirtualMemory
ole32
ReleaseStgMedium
advapi32
QueryServiceStatus
RegSetValueExW
user32
UnionRect
gdi32
GetCurrentObject
GetObjectW
SetDIBits
PatBlt
SetDIBColorTable
GetNearestColor
SetMapMode
SetDIBitsToDevice
CreateSolidBrush
StretchDIBits
DeleteObject
GetNearestPaletteIndex
SetStretchBltMode
SelectObject
SelectPalette
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE