?Dll1Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
66c4dd2f942ea830c4e1ea5c65d4c665_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66c4dd2f942ea830c4e1ea5c65d4c665_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
66c4dd2f942ea830c4e1ea5c65d4c665_JaffaCakes118
-
Size
68KB
-
MD5
66c4dd2f942ea830c4e1ea5c65d4c665
-
SHA1
015060a9a28cec89669f04ba6d5c2575c160d238
-
SHA256
e63afae33eaa3816be478c5c6b0a44ec635700c3f5b29a9905fcdbf8e7de3b47
-
SHA512
ac67dc596b0c9d43b169e72fc9e83203555d1d89a2013afac64b69c6c663b6209888262df0b4f3145f57994aeebc10862fe792252ad805eb1758fd977e55deda
-
SSDEEP
768:rtJvbhKSAsv7/6pNFXy6nhk3hG4ElmNoKFlgASCfLwoEwOUNpfu:rvNKSAG/cy6nhkx1DNRyVU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66c4dd2f942ea830c4e1ea5c65d4c665_JaffaCakes118
Files
-
66c4dd2f942ea830c4e1ea5c65d4c665_JaffaCakes118.dll windows:4 windows x86 arch:x86
0a338cebd9eee779203643c1a1267859
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
msvcrt
strtol
sscanf
fopen
fseek
ftell
fgetc
fread
fclose
memcpy
memset
time
sprintf
strcmp
strtok
strstr
strcat
printf
strcpy
strlen
kernel32
FreeLibrary
LocalAlloc
lstrcmpiA
CreateToolhelp32Snapshot
Process32First
Process32Next
TerminateProcess
OpenProcess
VirtualAllocEx
WriteProcessMemory
GetModuleHandleA
CreateRemoteThread
GetVersionExA
lstrcmpA
GetModuleFileNameA
Sleep
SetSystemTime
GetSystemTime
CloseHandle
GetFileSize
CreateFileA
WinExec
lstrcpyA
GetFileAttributesA
lstrcatA
GetSystemDirectoryA
lstrlenA
DeleteFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
CreateThread
GetProcAddress
LoadLibraryA
WriteFile
user32
GetWindowTextA
GetClassNameA
EnumWindows
SendMessageA
wsprintfA
CharUpperA
FindWindowExA
PostMessageA
ShowWindow
GetWindow
advapi32
CloseServiceHandle
QueryServiceConfigA
ChangeServiceConfigA
OpenServiceA
QueryServiceStatus
ControlService
DeleteService
OpenSCManagerA
CreateServiceA
LookupAccountSidA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
GetTokenInformation
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ole32
CoCreateGuid
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ