Static task
static1
Behavioral task
behavioral1
Sample
746ba9a657d6e6619b2c05aff02cb02e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
746ba9a657d6e6619b2c05aff02cb02e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
746ba9a657d6e6619b2c05aff02cb02e_JaffaCakes118
-
Size
130KB
-
MD5
746ba9a657d6e6619b2c05aff02cb02e
-
SHA1
7254d3a50db354df4e77bdf30cafd3beb7d4ce37
-
SHA256
b0e35712e10d0420631c5d22b782362b0646ff89a6fcdb24ea52137c35613730
-
SHA512
febce673770758b7f0a3e294e1b139ce2882fc541f234929615227cea9a79aaaaa5dfdbb6ff2759150d415fdf508636d224107a4db2718632ec874bfc4adf83b
-
SSDEEP
1536:4/nCVOYuWFO8pS6HyhGQS1F2WaKww2KD/kdMa2rWgjOw3Q8ncfgFC4JIb+LT4j5l:IaudAHorSJ7w4ss3f3jIjzyt5gXJl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 746ba9a657d6e6619b2c05aff02cb02e_JaffaCakes118
Files
-
746ba9a657d6e6619b2c05aff02cb02e_JaffaCakes118.dll windows:4 windows x86 arch:x86
3737e55029be44d76ada9789d7dfb55f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeEnvironmentStringsW
GetLocaleInfoA
GetSystemInfo
GetVersion
HeapAlloc
HeapCreate
HeapFree
LoadLibraryA
LocalAlloc
QueryPerformanceCounter
SetErrorMode
lstrcmpiA
lstrcpynA
msvcrt
strpbrk
__p__fmode
_stricmp
exit
fprintf
free
time
swscanf
wcslen
isdigit
fwprintf
user32
GetWindowLongA
RegisterWindowMessageA
SetCapture
SetUserObjectSecurity
GetKeyState
oleaut32
SafeArrayAccessData
OleLoadPicturePath
SafeArrayDestroy
SysReAllocString
SysStringLen
VarBstrCat
shlwapi
PathAppendA
PathGetCharTypeA
PathGetDriveNumberA
SHDeleteValueA
SHOpenRegStreamA
StrSpnA
StrToIntA
StrStrA
Sections
.text Size: 65KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ