MemcpyToArrayAsync
Static task
static1
Behavioral task
behavioral1
Sample
8754bedd7da75cfa92a03dc30bf0f882_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8754bedd7da75cfa92a03dc30bf0f882_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8754bedd7da75cfa92a03dc30bf0f882_JaffaCakes118
-
Size
195KB
-
MD5
8754bedd7da75cfa92a03dc30bf0f882
-
SHA1
7ceddef21172fa072f0cbc21f59e9ef07a0062e7
-
SHA256
2f8d0d61b60caff028bf8bfe003d45245006ee36a7525968aade71666214f130
-
SHA512
c791620fb3a05f2d373aa8f30c1e772fc9eaf75ea4bff8510cfa6edcf68bc73e4c4d8e9beca91c3e86ddac2ce25e31774f911e3d4b6e9cc931749bb0c814868c
-
SSDEEP
6144:9PkpsfVlUliZlrL3qIZFBpsn6PFb1CBc:aifVlUlDKBps6PSu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8754bedd7da75cfa92a03dc30bf0f882_JaffaCakes118
Files
-
8754bedd7da75cfa92a03dc30bf0f882_JaffaCakes118.dll windows:4 windows x86 arch:x86
0ee20195c2f140512dfd1345e53410ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateConsoleScreenBuffer
DisableThreadLibraryCalls
ExitProcess
FileTimeToLocalFileTime
GetACP
GetCommandLineA
GetConsoleCP
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStdHandle
GetTimeFormatA
GetTimeZoneInformation
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
MultiByteToWideChar
RtlUnwind
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsFree
VirtualQueryEx
WriteConsoleW
lstrcmpiA
user32
SystemParametersInfoA
SetTimer
SendMessageA
InsertMenuA
BeginPaint
advapi32
DuplicateTokenEx
RegOpenKeyExA
RegCreateKeyExW
LsaCreateSecret
RegisterEventSourceA
ConvertStringSecurityDescriptorToSecurityDescriptorA
CreateProcessAsUserW
CryptSetProviderA
RegReplaceKeyW
GetAclInformation
GetSecurityDescriptorDacl
ImpersonateAnonymousToken
LockServiceDatabase
ole32
StringFromGUID2
CoCreateInstance
CoFileTimeNow
CoTaskMemFree
IsEqualGUID
opengl32
glTexGendv
ddraw
DDInternalLock
DirectDrawEnumerateExA
DDGetAttachedSurfaceLcl
Exports
Exports
Sections
.text Size: 129KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ