ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
67a2aa03753909f2a7a60a9c032b6a29_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67a2aa03753909f2a7a60a9c032b6a29_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
67a2aa03753909f2a7a60a9c032b6a29_JaffaCakes118
-
Size
52KB
-
MD5
67a2aa03753909f2a7a60a9c032b6a29
-
SHA1
ad9bf28a74784d0d32eb346bc7a4a1ed476f0a6f
-
SHA256
162b91e397e0d226aa915759507dabc41d75419ffabff30f445912d291f2feb3
-
SHA512
8b47c65cd39e905ae0302c0e6e1a351bdb9f1f824c3f1664afda09e00b0380649ace372544e9561e21f0f3a4cf59c92a0fdf244cfd531a99d2ee047098ee4d7d
-
SSDEEP
1536:8sWoZhmWaeZNg5Z5nViwF0H0xP7KWoe1bMW:9WLWae/g5ZNVN5KWbbM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67a2aa03753909f2a7a60a9c032b6a29_JaffaCakes118
Files
-
67a2aa03753909f2a7a60a9c032b6a29_JaffaCakes118.dll windows:4 windows x86 arch:x86
66a366c3612f34d9d0430445ee94a6af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42
ord1168
ord342
ord1182
ord5621
ord1083
ord5600
ord773
ord501
ord3702
ord6383
ord5440
ord6394
ord5450
ord3318
ord535
ord825
ord541
ord5861
ord6143
ord801
ord268
ord1567
ord2393
ord354
ord5186
ord1979
ord665
ord537
ord800
ord540
ord2818
ord6662
ord4278
ord858
ord3663
ord823
ord1253
msvcrt
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
atoi
srand
rand
_snprintf
_ftol
memmove
calloc
_stricmp
isdigit
free
sprintf
strlen
memcpy
time
wcstombs
strcat
__CxxFrameHandler
memset
_strnicmp
kernel32
CreateEventA
CreateThread
SetEvent
TerminateThread
WaitForSingleObject
GetCurrentThreadId
LockResource
VirtualAlloc
FindClose
FindFirstFileA
GetCurrentThread
GetModuleHandleA
GetLastError
GetVersionExA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
CloseHandle
LoadLibraryA
GetProcAddress
GetCurrentProcess
Sleep
user32
wsprintfA
advapi32
SetServiceStatus
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sxv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ