Static task
static1
Behavioral task
behavioral1
Sample
695167c365262eeca4cfdeb3f87da1c9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
695167c365262eeca4cfdeb3f87da1c9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
695167c365262eeca4cfdeb3f87da1c9_JaffaCakes118
-
Size
112KB
-
MD5
695167c365262eeca4cfdeb3f87da1c9
-
SHA1
174460221972125f9d70692c403acda9d096fa67
-
SHA256
2cfab7cb3928c7e81e9501e451e4ba61a9525c40f4860cac265d21612e58b955
-
SHA512
7e0c00b1c4853d6aac48f0dfaaa91b0e3ceb8350defb84f983891242beeba5a593efe349ac7225dd0e3e99f386ebfbe72d70465005f82ba31a74a9b448509e90
-
SSDEEP
3072:MMb1IVLs05WNzmn+O38ES/rKXBGfK/L8uxxXy3qCSAMD3mx:FI20okfArfK7LTrD3G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 695167c365262eeca4cfdeb3f87da1c9_JaffaCakes118
Files
-
695167c365262eeca4cfdeb3f87da1c9_JaffaCakes118.dll windows:4 windows x86 arch:x86
06b269f5c00cabf4986f73faefb8d4cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RaiseException
GlobalFree
ReleaseMutex
WaitForSingleObject
FreeLibrary
GetModuleHandleW
WideCharToMultiByte
lstrlenA
GetVersionExW
InterlockedDecrement
CreateEventW
ChangeTimerQueueTimer
SetCurrentDirectoryW
GetWindowsDirectoryW
CreateDirectoryW
GetComputerNameW
GetCurrentDirectoryW
MoveFileExW
UnregisterWait
LoadLibraryW
GetSystemInfo
DisableThreadLibraryCalls
GetProcAddress
OpenFileMappingW
MapViewOfFileEx
CreateFileMappingW
VirtualAlloc
UnmapViewOfFile
GetModuleFileNameA
GetProfileStringA
CreateFileA
InterlockedIncrement
VirtualProtect
IsDebuggerPresent
GetCommandLineA
user32
CheckDlgButton
IsDlgButtonChecked
ShowWindow
MessageBoxW
SendMessageW
GetParent
PostMessageW
SetWindowLongW
BringWindowToTop
SetForegroundWindow
GetDlgItem
GetWindowLongW
SetCursor
LoadCursorW
SetWindowTextW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
msvcrt
_initterm
_adjust_fdiv
_strcmpi
memcpy
tolower
strchr
_strnicmp
strrchr
__dllonexit
_lock
_onexit
_stricmp
isspace
memset
wcschr
malloc
_except_handler3
_wcsicmp
_amsg_exit
_XcptFilter
free
_callnewh
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ