Static task
static1
Behavioral task
behavioral1
Sample
77d94d99bf89bd2421efd0d66ebcf25a_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
77d94d99bf89bd2421efd0d66ebcf25a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
77d94d99bf89bd2421efd0d66ebcf25a_JaffaCakes118
-
Size
10KB
-
MD5
77d94d99bf89bd2421efd0d66ebcf25a
-
SHA1
5d68683213dc98b91b24703bc121e7702cc5e6fc
-
SHA256
c6ee8becd1ea0773475200db1487d68c4d1cb55a34557723e0f476c413fca860
-
SHA512
f07e7db8fb088a4c6ff4c63f4cd939f13b35d1582671c1be0ee59e7615a340883eac9dd038a70d35978ea92fd8577cdf18df474821b033a0532ea9881b4768f9
-
SSDEEP
192:R/mo8OFq78pn7Hjjso3HeFz3sjRQyhBhMj9qJKVHTfncuk2Bm4U3QE1a7:tmR78pn7HjPeFwjjhkj9qJK5P5BmjQui
Malware Config
Signatures
Files
-
77d94d99bf89bd2421efd0d66ebcf25a_JaffaCakes118.dll windows:1 windows x86 arch:x86
1d07c87f5f68e929912896a61205c5a0
Code Sign
6a:2f:41:41:61:66:4c:62:b4:27:e3:49:19:d4:a2:1fCertificate
IssuerCN=Root AgencyNot Before05/03/2010, 15:50Not After31/12/2039, 23:59SubjectCN=JinDiQIAO,OU=WWW.CeleWare.NET,O=CeleWare.NET,1.2.840.113549.1.9.1=#0c154a696e44695149414f40686f746d61696c2e636f6dSigner
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CopyFileA
CreateEventA
CreateThread
DeleteFileA
ExpandEnvironmentStringsA
GetLastError
GetModuleFileNameA
GetProcAddress
GetTempFileNameA
GetTempPathA
LoadLibraryA
MoveFileExA
RtlZeroMemory
VirtualAlloc
VirtualFree
lstrcmpiA
user32
GetMenu
GetMessageA
MessageBeep
MessageBoxA
Exports
Exports
CreateWindowA
DllCanUnloadNow
DllGetClassObject
MessageBoxA
lstrlen
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE