AgereCommsapi
Static task
static1
Behavioral task
behavioral1
Sample
8210befbb617df72e365509d5ade724c_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8210befbb617df72e365509d5ade724c_JaffaCakes118.dll
Resource
win10v2004-20240730-en
General
-
Target
8210befbb617df72e365509d5ade724c_JaffaCakes118
-
Size
144KB
-
MD5
8210befbb617df72e365509d5ade724c
-
SHA1
6d77ee1a779f28c4d51880268382a5ac053aa6ad
-
SHA256
aff42ca184891b2866edd8e32103f317f9da79a196b5092118c880af00e01cea
-
SHA512
a47fbf545a7e98f7f1c7d71ca729c6556e18024a6d22de1ad3e29851da46fe1c62c114d78d5d4ce99e4b5ac051fec1c747354465f25d55095c5cf15157d57006
-
SSDEEP
3072:ptQ+7mx/LNQ/USLuiMNcXzF/Sr1ymICPNyt/Ws:p/7yNEgNUzJSr1TRot/Ws
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8210befbb617df72e365509d5ade724c_JaffaCakes118
Files
-
8210befbb617df72e365509d5ade724c_JaffaCakes118.dll windows:4 windows x86 arch:x86
ceca841302421b5606fef897caf2c89b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
InterlockedIncrement
GetLastError
ReleaseMutex
EnterCriticalSection
LoadLibraryA
lstrlenW
lstrlenA
LocalFree
WaitForSingleObject
InterlockedCompareExchange
GetModuleFileNameA
ExitProcess
OpenEventA
GetModuleHandleA
CopyFileA
GetCommandLineA
Sleep
CreateProcessA
GetTickCount
UnmapViewOfFile
SetLastError
CreateEventA
MapViewOfFile
InterlockedDecrement
LeaveCriticalSection
GetProcAddress
CreateDirectoryA
ole32
OleSetContainedObject
CoCreateGuid
CoUninitialize
CreateBindCtx
CoInitialize
OleCreate
user32
PostQuitMessage
GetSystemMetrics
TranslateMessage
CreateWindowExA
DispatchMessageA
GetMessageA
FindWindowA
GetParent
KillTimer
RegisterWindowMessageA
SetTimer
GetWindowLongA
PostMessageA
SendMessageA
SetWindowLongA
GetClassNameA
DefWindowProcA
DestroyWindow
oleaut32
SysFreeString
SysAllocString
SysAllocStringLen
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
Exports
Exports
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ