Static task
static1
Behavioral task
behavioral1
Sample
66131d89b7e547300721e7abf4f408c7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66131d89b7e547300721e7abf4f408c7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
66131d89b7e547300721e7abf4f408c7_JaffaCakes118
-
Size
100KB
-
MD5
66131d89b7e547300721e7abf4f408c7
-
SHA1
7746bbf6d1b206dca1a8f7cdd40a55e0f3ad4e83
-
SHA256
814b377dbe1894a51a2ca90826239d69f801d2b69abca7f3b3d72e00d634fa0f
-
SHA512
ec041ecd169bf678c9658dd825ad292443189cd7abdbb8ec1e9aef804e7a7381513f3bf24571cd75b59069b1c290f6c9eab6df76d7a19c8d0c423ba011e5b60b
-
SSDEEP
1536:+fLoU6BSf8/D4wzQGZ3XSfbpz1g98YlpZtal7QYBsPBEYbogNa:+0b88/MtI3XSfb3MdkPmfbogNa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66131d89b7e547300721e7abf4f408c7_JaffaCakes118
Files
-
66131d89b7e547300721e7abf4f408c7_JaffaCakes118.dll windows:4 windows x86 arch:x86
4407a165b0537d747366ed903475e678
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LockResource
LoadResource
SizeofResource
FindResourceW
GetStartupInfoW
FindFirstFileW
FindClose
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
CreateFileW
ReadDirectoryChangesW
GetFileAttributesW
CloseHandle
InterlockedDecrement
InterlockedCompareExchange
DisableThreadLibraryCalls
GetFileAttributesA
FindNextFileA
FindNextFileW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetStringTypeW
FreeEnvironmentStringsA
GetStartupInfoA
Sleep
InterlockedExchange
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
VirtualProtect
GetVersionExA
GetCommandLineA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
user32
ShowWindow
LoadCursorW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
LoadIconW
SetTimer
GetSysColorBrush
SendMessageW
RegisterClassExW
IsWindowVisible
GetDlgItem
DestroyWindow
UnregisterClassW
advapi32
RegOpenKeyExW
ConvertStringSidToSidW
LookupAccountSidW
RegCloseKey
RegQueryValueExW
gdi32
DeleteObject
CreateFontIndirectW
ole32
CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance
CoInitializeEx
CoTaskMemFree
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ