Static task
static1
Behavioral task
behavioral1
Sample
636e2e5333040112b9f295d637b42d09_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
636e2e5333040112b9f295d637b42d09_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
636e2e5333040112b9f295d637b42d09_JaffaCakes118
-
Size
89KB
-
MD5
636e2e5333040112b9f295d637b42d09
-
SHA1
d4d3b52d12a3d2e1385160a097e33aa3d9033cb0
-
SHA256
dcc5b5fbda9d0eb1b9a184e88a90c82663ff622074fb1813e2deaf072cceb28e
-
SHA512
f704cd248add20d0ae3f9455646a15e4d9c6236f0b6d7240ee3ee8a22ea6b5be568a92ae8964083ad3092ec2f873d203aee1c3244ff54fbb4201b1d577735678
-
SSDEEP
1536:EMV5993MRxIlL9snrnfZ0A98kb+Ou8ShoS+eNzBdbhzehH3G8YGav:EMV5L6iL+zuf9HroZeNzTbhz/8W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 636e2e5333040112b9f295d637b42d09_JaffaCakes118
Files
-
636e2e5333040112b9f295d637b42d09_JaffaCakes118.dll windows:4 windows x86 arch:x86
e8330ebd9200d7a029da39497710b69d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsDBCSLeadByte
LoadLibraryA
InterlockedExchange
InterlockedExchangeAdd
GetModuleFileNameA
GetProcAddress
GetVersion
GetUserDefaultLCID
MulDiv
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
GetTickCount
GetCurrentProcess
GetVersionExA
Sleep
QueryPerformanceFrequency
GetCurrentThreadId
SetLastError
IsBadWritePtr
IsDebuggerPresent
QueryPerformanceCounter
user32
IsWindowUnicode
GetWindowRect
GetClientRect
IsCharAlphaNumericA
IsCharAlphaA
GetWindowRgn
WindowFromDC
GetForegroundWindow
GetIconInfo
CopyIcon
GetDlgItem
GetAncestor
GetTitleBarInfo
GetWindow
GetWindowInfo
GetGUIThreadInfo
IsMenu
SetLastErrorEx
BlockInput
IsCharUpperA
advapi32
IsValidSecurityDescriptor
InitializeSecurityDescriptor
IsValidAcl
IsValidSid
RevertToSelf
msvcrt
_initterm
free
memmove
_memccpy
_set_error_mode
_CIasin
_ltoa
_isctype
ldiv
_itoa
div
__doserrno
malloc
_adjust_fdiv
ceil
time
ldexp
_pctype
__mb_cur_max
gdi32
GetPixel
GetStretchBltMode
ole32
CoFileTimeNow
shell32
ord64
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ