Static task
static1
Behavioral task
behavioral1
Sample
6fd3aac067e9ecaf3189be0194332430_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6fd3aac067e9ecaf3189be0194332430_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6fd3aac067e9ecaf3189be0194332430_JaffaCakes118
-
Size
18KB
-
MD5
6fd3aac067e9ecaf3189be0194332430
-
SHA1
d6bd60195e273d30d15c23ab80d95577fed4848c
-
SHA256
99d6db057fcef95ed5f8ec1ed0608e8ce26260ad5f501a35efd4be792c4aaec6
-
SHA512
b1f0c7eb1daed47ca7994a5d87bca9fe6a5cd3a87a219bdcfc5d95b5e64ba6728241d3268d60e95bb9f145cb7c74bb40bc7093b1f310182d7cf1cc1bff362b7a
-
SSDEEP
384:1vmk3KAybBZP5vUtUhKxDzLxDnJCuiafxWiiY2Fs8KPiP/j:1ek3qb/P9UtAGDcXw0s8Kq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fd3aac067e9ecaf3189be0194332430_JaffaCakes118
Files
-
6fd3aac067e9ecaf3189be0194332430_JaffaCakes118.dll windows:4 windows x86 arch:x86
d1c0e373db70becc667779886c55b58c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalUnlock
GlobalLock
GlobalAlloc
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryA
ReadProcessMemory
SetThreadContext
GetCurrentThread
SetUnhandledExceptionFilter
GlobalFree
WriteProcessMemory
InitializeCriticalSection
IsBadReadPtr
RaiseException
TerminateThread
GetComputerNameA
Sleep
GetCurrentProcess
VirtualProtectEx
GetModuleFileNameA
CreateThread
GetCurrentProcessId
OpenMutexA
CreateMutexA
user32
GetWindowTextA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetWindowThreadProcessId
FindWindowA
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
msvcrt
free
_initterm
malloc
_adjust_fdiv
_stricmp
_strlwr
strstr
strcat
sprintf
strcpy
strrchr
memcpy
??2@YAPAXI@Z
strlen
strncpy
strchr
memset
wcslen
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdt Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ