Static task
static1
Behavioral task
behavioral1
Sample
662c87bd6227f145e8b2f6fb736dc6a5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
662c87bd6227f145e8b2f6fb736dc6a5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
662c87bd6227f145e8b2f6fb736dc6a5_JaffaCakes118
-
Size
71KB
-
MD5
662c87bd6227f145e8b2f6fb736dc6a5
-
SHA1
e88c2689514ba01795559ec5cb3218e634811cc1
-
SHA256
fad4b2e84700ab1b95984e4176eeae91c2cf9dae1d6be4f6507e589ac851766b
-
SHA512
0e8fe55dd0314e9939fe87745153960d65c3379e168667b0a316e1f4b34bb341d46841962ad473016639dbcbd37cb4a34a8198b69dd2f461530438efceeb1f7c
-
SSDEEP
1536:r+0qa7XQMJkQSQjwdW+BhIKFhNsKMfbcKNaOJ7xJcu:6B6dk1QjMWohI2hNefbpxJc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 662c87bd6227f145e8b2f6fb736dc6a5_JaffaCakes118
Files
-
662c87bd6227f145e8b2f6fb736dc6a5_JaffaCakes118.dll windows:4 windows x86 arch:x86
11b3796f13e1d6150671decf3ec011dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAlloc
VirtualFree
VirtualProtect
GetCommandLineA
Sleep
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
LocalFree
SetUnhandledExceptionFilter
GetLocaleInfoA
lstrlenW
lstrcpyW
lstrcatW
GetLocalTime
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapDestroy
DisableThreadLibraryCalls
rpcrt4
NdrDllGetClassObject
msvcr71
isspace
__CppXcptFilter
_except_handler3
_amsg_exit
_initterm
_wcmdln
exit
_cexit
_lseek
__pioinfo
memmove
_write
_read
_sopen
_setmode
isdigit
_errno
sprintf
_iob
__dllonexit
_onexit
fflush
_adjust_fdiv
free
_XcptFilter
memcpy
_snprintf
malloc
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ