Static task
static1
Behavioral task
behavioral1
Sample
860b489f516db4bd45d5df0133a78805_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
860b489f516db4bd45d5df0133a78805_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
860b489f516db4bd45d5df0133a78805_JaffaCakes118
-
Size
18KB
-
MD5
860b489f516db4bd45d5df0133a78805
-
SHA1
c12d37d1c37a1709526238170940df605828a42d
-
SHA256
1ec4958e2dfc25dac5d02583e1d0b2df1ef5e2bc2f26cf3a4fb252865a8ac788
-
SHA512
af1665149439f7a277710462c8defd105262c0d5accdea406f752edf80f03ebb05ba8bb4374880b3222d7df6263e2a6fc1dea25b40bbf60b52818d7f38029aa4
-
SSDEEP
384:lvZrMsFZBPbbZRKRUtU1KcyzLxLGJfNiafQbiiY2AgKnaiMeu:lRrMsTxbtR+UtkoLqUt0gKn5Me
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 860b489f516db4bd45d5df0133a78805_JaffaCakes118
Files
-
860b489f516db4bd45d5df0133a78805_JaffaCakes118.dll windows:4 windows x86 arch:x86
fd5ab7b40d98e887f43bb7895bb77fc4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalUnlock
GlobalLock
GlobalAlloc
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryA
ReadProcessMemory
SetThreadContext
GetCurrentThread
SetUnhandledExceptionFilter
GlobalFree
WriteProcessMemory
InitializeCriticalSection
IsBadReadPtr
RaiseException
TerminateThread
GetComputerNameA
Sleep
GetCurrentProcess
VirtualProtectEx
GetModuleFileNameA
CreateThread
GetCurrentProcessId
OpenMutexA
CreateMutexA
user32
GetWindowTextA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetWindowThreadProcessId
FindWindowA
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
msvcrt
free
_initterm
malloc
_adjust_fdiv
_stricmp
_strlwr
strstr
strcat
sprintf
strcpy
strrchr
memcpy
??2@YAPAXI@Z
strlen
strchr
strncpy
memset
wcslen
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdt Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ