Static task
static1
Behavioral task
behavioral1
Sample
85f93790618f7150b177953fca151744_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
85f93790618f7150b177953fca151744_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
85f93790618f7150b177953fca151744_JaffaCakes118
-
Size
68KB
-
MD5
85f93790618f7150b177953fca151744
-
SHA1
0466ff202be0d4126bd72ace0757f1efa6e2cb57
-
SHA256
f9b7bb6eed20efdac5ee0e062d97ce1706347d9414222012f0e6891ccf31cff6
-
SHA512
3c040e100fd5e4a718790749c01255e31ab919d1a1a556bce657aad68ea0b669610f6c03dc90defe069296a035009f0bd361959971b521948dea409524cec2e1
-
SSDEEP
1536:xuQ5D6aLNE+AzkcBy4mSMzCmxJSZPxvx3ELWg:xl5fLNE+AzkcBy4mXzcZJJUK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85f93790618f7150b177953fca151744_JaffaCakes118
Files
-
85f93790618f7150b177953fca151744_JaffaCakes118.dll windows:4 windows x86 arch:x86
10d4f5f58cf040d0f08d9fde55f3958e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
DisableThreadLibraryCalls
EnumUILanguagesW
CloseHandle
CreateProcessW
InterlockedExchange
HeapAlloc
GetProcessHeap
SetUnhandledExceptionFilter
lstrlenA
MultiByteToWideChar
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LeaveCriticalSection
InterlockedDecrement
SetLastError
GetCommandLineA
VirtualProtect
VirtualFree
HeapFree
VirtualAlloc
user32
LoadStringA
PostMessageA
advapi32
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExA
RegOpenKeyExW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
msvcr71
__CppXcptFilter
wcschr
wcscmp
wprintf
_wcsicmp
_CxxThrowException
_except_handler3
_adjust_fdiv
_amsg_exit
_initterm
free
_XcptFilter
malloc
_onexit
_lock
__dllonexit
memset
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ