Static task
static1
Behavioral task
behavioral1
Sample
63e05cee92d873c9ef78cee3a2585db6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63e05cee92d873c9ef78cee3a2585db6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
63e05cee92d873c9ef78cee3a2585db6_JaffaCakes118
-
Size
296KB
-
MD5
63e05cee92d873c9ef78cee3a2585db6
-
SHA1
407e87381b9095f4ba36242d04b08621edef2ce3
-
SHA256
88373bddd117ea24af6e53453f45cb888c85d09c94501b96379b1a1db87c49b7
-
SHA512
98bb3c53d6099e51d12ebf60f9b434ef418405eb749a3390cfe4dae4b02791e183a2b94f4ab42fd26d9d576ad18a21fef7db9c1559a2b738cc5a4f42a9e3326f
-
SSDEEP
6144:tZLoS/yl2VhVzypYc2VVnoSqyr4O+qPc4:tZLoSK2lz+t2VPY6c4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63e05cee92d873c9ef78cee3a2585db6_JaffaCakes118
Files
-
63e05cee92d873c9ef78cee3a2585db6_JaffaCakes118.dll windows:4 windows x86 arch:x86
944408c3a18571b2de23a5cc4c4a679e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
GetModuleFileNameW
CreateDirectoryW
MoveFileW
WaitForSingleObject
Sleep
FindFirstFileW
FindClose
GetProcAddress
LoadLibraryW
GetLastError
MultiByteToWideChar
WriteFile
SetFilePointer
SystemTimeToFileTime
GetFileAttributesW
ReadFile
GetCurrentDirectoryW
LocalFileTimeToFileTime
WideCharToMultiByte
SetFileTime
DebugBreak
CreateFileA
SetEndOfFile
CreateFileW
lstrcpynW
GetSystemTime
FindNextFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
FreeLibrary
LoadLibraryA
InitializeCriticalSection
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualQuery
user32
GetDesktopWindow
GetWindow
MessageBoxW
advapi32
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
ole32
CoInitialize
Sections
.text Size: 248KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ