Static task
static1
Behavioral task
behavioral1
Sample
63fb3a582b99d87a78a065c57cb6dbeb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63fb3a582b99d87a78a065c57cb6dbeb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
63fb3a582b99d87a78a065c57cb6dbeb_JaffaCakes118
-
Size
17KB
-
MD5
63fb3a582b99d87a78a065c57cb6dbeb
-
SHA1
d5bee307e02de9c7dffe3e11eefaba193eb86cf7
-
SHA256
6301285ae800ed88bc79a1960fc42a164b05cc7c9d5b40d3407cf940ec2ccafc
-
SHA512
d6b5ebaefbc782a8b73f91ee1ee592a5069683980ac0d9d26ed291b1e5be174b7e4cbb6c9714c77549f6924b52810c64a042b514414e269b052db6d349495430
-
SSDEEP
384:bywS4j6h2Xir2cwsiv7oBdb8C9QDEoEoNpw:Buhy5vEsC9GEKNpw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63fb3a582b99d87a78a065c57cb6dbeb_JaffaCakes118
Files
-
63fb3a582b99d87a78a065c57cb6dbeb_JaffaCakes118.dll windows:4 windows x86 arch:x86
91f6ac0aa5387987ee578fb7ed168e40
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
TerminateProcess
GetCurrentProcess
GetFileSize
CloseHandle
ReadFile
SetFilePointer
CreateFileA
AddVectoredExceptionHandler
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualProtect
Thread32Next
SetThreadContext
GetThreadContext
OpenThread
GetCurrentProcessId
Thread32First
CreateToolhelp32Snapshot
Sleep
GetProcessHeap
HeapAlloc
LoadLibraryA
GetFileAttributesA
GetVersion
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
CreateThread
msvcrt
memcpy
_except_handler3
strncpy
strlen
malloc
_vsnprintf
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strcmpi
free
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
strcat
strrchr
__CxxFrameHandler
user32
wsprintfA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ