Static task
static1
Behavioral task
behavioral1
Sample
6475b7c3208fafc3abcc5d84c7b4124e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6475b7c3208fafc3abcc5d84c7b4124e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6475b7c3208fafc3abcc5d84c7b4124e_JaffaCakes118
-
Size
131KB
-
MD5
6475b7c3208fafc3abcc5d84c7b4124e
-
SHA1
d7b54fe796690a2c1ef986e51dec48cbc8b9eb90
-
SHA256
722b914c235bd96a4868915134ffcd0dddb8f13925e9d91e64ab97cbebb951a7
-
SHA512
fd44dd31aaaa5823d2224e5f0a7045f47dc2fc81f641371148e0b0a7cb1da7d3b96069e2ae14c6f13243df99b87a3acf3aed8271f79e12c92a0b04f4d7790777
-
SSDEEP
3072:Q0LrYgYOc1s3Pp+KCXFPEUruWnGgB/shWoFR:rkT2wVPZP/sh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6475b7c3208fafc3abcc5d84c7b4124e_JaffaCakes118
Files
-
6475b7c3208fafc3abcc5d84c7b4124e_JaffaCakes118.dll windows:4 windows x86 arch:x86
038498cad3b927da94f24f39a88467e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
DisableThreadLibraryCalls
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
InterlockedIncrement
LocalFree
LocalAlloc
GlobalAlloc
SleepEx
CloseHandle
SetEvent
QueueUserAPC
DuplicateHandle
GetCurrentThread
GetCurrentProcess
GetCurrentThreadId
GetProcAddress
TerminateThread
GetProcessTimes
HeapCreate
WaitForMultipleObjectsEx
SuspendThread
ResumeThread
lstrlenW
WideCharToMultiByte
GlobalFree
Sleep
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MultiByteToWideChar
SwitchToThread
GetStringTypeA
LCMapStringW
GetStringTypeW
FreeLibrary
HeapDestroy
lstrcpynA
lstrcmpiA
lstrlenA
InterlockedDecrement
GetCommandLineA
CreateEventA
VirtualProtect
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
user32
CharNextA
PostMessageA
advapi32
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegDeleteKeyW
ole32
CoCreateInstanceEx
CoCreateInstance
CoTaskMemFree
rpcrt4
RpcSsDestroyClientContext
NdrClientCall2
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ