Static task
static1
Behavioral task
behavioral1
Sample
7391b606a8c1a3814c5576ad48fbcf6f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7391b606a8c1a3814c5576ad48fbcf6f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
7391b606a8c1a3814c5576ad48fbcf6f_JaffaCakes118
-
Size
28KB
-
MD5
7391b606a8c1a3814c5576ad48fbcf6f
-
SHA1
ac60c928960871d96692eb9ab5c79016ac70ba5d
-
SHA256
47d314466252d9c8f57608dbd79de2db72ea3b00bb936a42b866e14401dd37f9
-
SHA512
fbc23225a6c256b397267d3d346778e8b98f7a3d6d941231a0b865578edff6a4c7e552e575304d5bf89f54a7f9e8690666030b2e9d5f9b3e5ff7c74fe4603caf
-
SSDEEP
192:tni5aITYc1XwciHZMEVnvAsS21mmlrCDx/bqSbUcNKlRukURN0N8uNTI2OZ9oPeN:tnCaITBYWEu2VNCdvKWkprTOZK2N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7391b606a8c1a3814c5576ad48fbcf6f_JaffaCakes118
Files
-
7391b606a8c1a3814c5576ad48fbcf6f_JaffaCakes118.dll windows:4 windows x86 arch:x86
7cdf5f54cb7e2eeb7cc1510749732a4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42
ord535
ord6663
ord539
ord940
ord941
ord939
ord537
ord4278
ord2818
ord858
ord860
ord2764
ord540
ord800
msvcrt
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
strstr
__CxxFrameHandler
kernel32
GetFileSize
CreateThread
CloseHandle
GetCurrentProcessId
GetModuleFileNameA
Sleep
ReadFile
SetFilePointer
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
OpenProcess
user32
TranslateMessage
GetMessageA
SetWindowsHookExA
CallNextHookEx
IsWindowVisible
GetClassNameA
DispatchMessageA
FindWindowExA
SendMessageTimeoutA
RegisterWindowMessageA
GetForegroundWindow
UnhookWindowsHookEx
SendMessageA
ws2_32
send
connect
htons
socket
gethostbyname
WSAStartup
recv
closesocket
ole32
CoUninitialize
CoInitialize
oleaut32
VariantClear
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SHARDAT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 930B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ