Static task
static1
Behavioral task
behavioral1
Sample
8606679598d33f446dccad83053d6843_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8606679598d33f446dccad83053d6843_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8606679598d33f446dccad83053d6843_JaffaCakes118
-
Size
104KB
-
MD5
8606679598d33f446dccad83053d6843
-
SHA1
c4bba2ae1c956d02ea15a04cbecee185fd0be4ef
-
SHA256
59e3b3cd193d02dbc43ad4da8bd39014f39c00c20d466d4ea557eb236489c5e9
-
SHA512
68516e848ba57c3e276e4653b94345a0f4d3ce06f82ac42e181f61816d8d2f0d06d88400310483ddfc0cf84637f76aa3db6b28a8a5d038cb84eb6ff01bb7f87f
-
SSDEEP
3072:8IVp+9G57cZzYH3Df2hJWl8MqqDLy/YeX:rcGtiUoYqqDLuz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8606679598d33f446dccad83053d6843_JaffaCakes118
Files
-
8606679598d33f446dccad83053d6843_JaffaCakes118.dll windows:4 windows x86 arch:x86
3edb688fe812a8c2225cc0211293006c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTickCount
WideCharToMultiByte
lstrcpyA
DeleteFileA
FormatMessageA
FindResourceA
LoadResource
LockResource
GlobalLock
GlobalAlloc
GlobalSize
InterlockedDecrement
LocalFree
LocalAlloc
GetLocaleInfoA
GetSystemTimeAsFileTime
MultiByteToWideChar
GetCurrentThreadId
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
MoveFileA
GlobalUnlock
GlobalFree
GetTempFileNameA
lstrlenA
VirtualProtect
GetCurrentProcessId
GetCommandLineA
SetUnhandledExceptionFilter
WriteFile
UnhandledExceptionFilter
GetSystemInfo
GetEnvironmentStringsW
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
RtlUnwind
GetVersionExA
InterlockedExchange
VirtualQuery
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
user32
EndPaint
wsprintfA
CharNextA
SetFocus
SetWindowLongA
RegisterClipboardFormatA
GetClipboardFormatNameA
GetMessageA
TranslateMessage
DispatchMessageA
LoadStringA
LoadCursorA
CreateWindowExA
RegisterClassA
PostMessageA
IsWindow
BeginPaint
DefWindowProcA
DestroyWindow
GetWindowLongA
advapi32
RegCloseKey
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegOpenKeyA
gdi32
GetStockObject
ole32
OleRun
StgIsStorageFile
StgCreateDocfile
OleCreateDefaultHandler
ReleaseStgMedium
StringFromGUID2
OleInitialize
OleUninitialize
OleLoad
StgOpenStorage
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ