DllCanUnloadNow
Static task
static1
Behavioral task
behavioral1
Sample
644e8684e4b69bbfecb0fffdde358c2f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
644e8684e4b69bbfecb0fffdde358c2f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
644e8684e4b69bbfecb0fffdde358c2f_JaffaCakes118
-
Size
20KB
-
MD5
644e8684e4b69bbfecb0fffdde358c2f
-
SHA1
94c15e9e09eb82b201f63b442265f7341650b23d
-
SHA256
7827d1751dc44c69f614564b734a87d261906b757b81f39f8686a50eb6334af2
-
SHA512
906d50c1366bbc02709f91a075a175a31cde6c10ff5db259c80133329e8653cdce1e97ae78f27807063285ae97c13a0b25c4171067b2bcb39f8c6a0dffd39751
-
SSDEEP
384:dx++uZNUL1bQE1ysPmkDnEuV0uqXRIoa6:6+k6JbQE1ysPmkg6GRLa6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 644e8684e4b69bbfecb0fffdde358c2f_JaffaCakes118
Files
-
644e8684e4b69bbfecb0fffdde358c2f_JaffaCakes118.dll windows:4 windows x86 arch:x86
d00c978743a2de45a81b90757c7025a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenA
GetProcAddress
LoadLibraryA
Sleep
GlobalAlloc
GetLastError
CloseHandle
GlobalFree
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetTickCount
CreateMutexA
ExitThread
lstrcatA
CreateThread
DisableThreadLibraryCalls
VirtualProtect
GetModuleHandleA
lstrcmpiA
user32
wsprintfA
wininet
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 630B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ