?Dll1Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
688780d88ef7a30a0f56b09d26be5d31_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
688780d88ef7a30a0f56b09d26be5d31_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
688780d88ef7a30a0f56b09d26be5d31_JaffaCakes118
-
Size
68KB
-
MD5
688780d88ef7a30a0f56b09d26be5d31
-
SHA1
50849f6eb66a299a2be48b7a76a95d51119c75a9
-
SHA256
f9f33fd5f2d83c448d8c04e6eff3336829b54a0a34ecaaea7c74d15d430fc08a
-
SHA512
4722cc23cee906f51157e81e07f293a3b9b577fab40d5be0acd8991e254f81eaa9b2686593e83313f5da6161a476be9752bf5ebce69a9988f41b6b46a59cbe9c
-
SSDEEP
768:rKZ/0RWGiz3QjINTN/Xy4TEE3AHJ1QjixbxOjFfo+PzFhpOVwlJjg:y3QjINTY4TEkAnxb6fZOSl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 688780d88ef7a30a0f56b09d26be5d31_JaffaCakes118
Files
-
688780d88ef7a30a0f56b09d26be5d31_JaffaCakes118.dll windows:4 windows x86 arch:x86
0a338cebd9eee779203643c1a1267859
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
msvcrt
strtol
sscanf
fopen
fseek
ftell
fgetc
fread
fclose
memcpy
memset
time
sprintf
strcmp
strtok
strstr
strcat
printf
strcpy
strlen
kernel32
FreeLibrary
LocalAlloc
lstrcmpiA
CreateToolhelp32Snapshot
Process32First
Process32Next
TerminateProcess
OpenProcess
VirtualAllocEx
WriteProcessMemory
GetModuleHandleA
CreateRemoteThread
GetVersionExA
lstrcmpA
GetModuleFileNameA
Sleep
SetSystemTime
GetSystemTime
CloseHandle
GetFileSize
CreateFileA
WinExec
lstrcpyA
GetFileAttributesA
lstrcatA
GetSystemDirectoryA
lstrlenA
DeleteFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
CreateThread
GetProcAddress
LoadLibraryA
WriteFile
user32
GetWindowTextA
GetClassNameA
EnumWindows
SendMessageA
wsprintfA
CharUpperA
FindWindowExA
PostMessageA
ShowWindow
GetWindow
advapi32
CloseServiceHandle
QueryServiceConfigA
ChangeServiceConfigA
OpenServiceA
QueryServiceStatus
ControlService
DeleteService
OpenSCManagerA
CreateServiceA
LookupAccountSidA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
GetTokenInformation
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ole32
CoCreateGuid
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ