DllCanUnloadNow
Static task
static1
Behavioral task
behavioral1
Sample
65854f2d7f42b7a585d0a6f2437ef743_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65854f2d7f42b7a585d0a6f2437ef743_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
65854f2d7f42b7a585d0a6f2437ef743_JaffaCakes118
-
Size
20KB
-
MD5
65854f2d7f42b7a585d0a6f2437ef743
-
SHA1
af5a178d62975f97aeacf5c1a94deb38464daacd
-
SHA256
761bcf2c035fabec8ebc14381ed1bdbe3692bc1eb45de18283dd9112834a94fc
-
SHA512
51d15b85e988e174ca8afb395a1d0a1d4d6e29efed7d1e4f9f612720196c6947041c7d2fa7a8ac5a36fb8d7ae9cf2e66581b8a7ec21a11f325ef049a8a1e9540
-
SSDEEP
384:hJtu8yrcBFftyN8L5Dtyjhba+BN9gdUiqCgsGlEHMXRIWEUVFlzt:hbu1cBbyN3hfB0UUgsvHcRLEUVFlzt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65854f2d7f42b7a585d0a6f2437ef743_JaffaCakes118
Files
-
65854f2d7f42b7a585d0a6f2437ef743_JaffaCakes118.dll windows:4 windows x86 arch:x86
d00c978743a2de45a81b90757c7025a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenA
GetProcAddress
LoadLibraryA
Sleep
GlobalAlloc
GetLastError
CloseHandle
GlobalFree
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetTickCount
CreateMutexA
ExitThread
lstrcatA
CreateThread
DisableThreadLibraryCalls
VirtualProtect
GetModuleHandleA
lstrcmpiA
user32
wsprintfA
wininet
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 630B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ