Static task
static1
Behavioral task
behavioral1
Sample
6a19feef247ec13fde93749379a69d13_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a19feef247ec13fde93749379a69d13_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6a19feef247ec13fde93749379a69d13_JaffaCakes118
-
Size
100KB
-
MD5
6a19feef247ec13fde93749379a69d13
-
SHA1
328483885d362d190bc47d2c5a3b6191e8245539
-
SHA256
18194f04b813c8055e7aede3a548b9812af0c73f144f810e09cbd8f66c4739e7
-
SHA512
1ffe3986eb9b1283355a0e0bfdfdc2a343849e92c2e94dd9c418c23d846d3a9f5d9a0d2f012159e02155c47a38454f6249bb369f5c446af89798ae8290c6925c
-
SSDEEP
1536:inNLjCh9FTygqzLb3oDfRcq3e2KAW7T1y9G+ZG9vaUR8o6jNIjs1kJFL9:inA9WzLb3oDfrqAk1yo+MiNIQ1kJZ9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a19feef247ec13fde93749379a69d13_JaffaCakes118
Files
-
6a19feef247ec13fde93749379a69d13_JaffaCakes118.dll windows:4 windows x86 arch:x86
19710919cb334434fb31ce75ad1198d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
GetCommandLineA
LocalFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
HeapAlloc
HeapFree
RtlUnwind
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ