pfjaoidjglkajd
Static task
static1
Behavioral task
behavioral1
Sample
773758783d4a3f67d37898ae0662f829_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
773758783d4a3f67d37898ae0662f829_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
773758783d4a3f67d37898ae0662f829_JaffaCakes118
-
Size
11KB
-
MD5
773758783d4a3f67d37898ae0662f829
-
SHA1
f3d8431381924f433e94fa634c9646a3ddd6466c
-
SHA256
a6598371f29f7833d13ada9953472b3a9b49b866a59eef4a5c7029aa258985b6
-
SHA512
b4b151b4e74dd7468be40ceb3f0476aeb2148a5d9db7a8b1d8b8148ea4fc0714528f316d190c824f14511bbc1472da17cd1c527378474d0e36f0f42e447f1145
-
SSDEEP
192:aI32tMUCq9JMn8hMz5YwMrxZSPRCEJCysQ6QkdWPbrxyZKt:aIG1n9+8uGwU/S5CzQ6QkkTd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 773758783d4a3f67d37898ae0662f829_JaffaCakes118
Files
-
773758783d4a3f67d37898ae0662f829_JaffaCakes118.dll windows:4 windows x86 arch:x86
f82c1d9681aded7a3f56276948aed0e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
OpenProcess
GetLastError
GetCurrentProcess
GetModuleHandleA
lstrcatA
FindClose
FindFirstFileA
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
lstrlenA
GetWindowsDirectoryA
ReleaseMutex
CreateMutexA
FindNextFileA
Sleep
DeleteFileA
lstrcpyA
CreateThread
GetCurrentProcessId
CloseHandle
LoadLibraryA
CreateRemoteThread
GetProcAddress
user32
FindWindowA
PostMessageA
wsprintfA
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
msvcrt
sprintf
_stricmp
memset
strlen
strcat
strrchr
strcpy
_except_handler3
strstr
psapi
EnumProcessModules
GetModuleFileNameExA
Exports
Exports
Sections
.bss Size: - Virtual size: 856B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ