Static task
static1
Behavioral task
behavioral1
Sample
8921433c90cd2929ff48a3c2ea0712b1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8921433c90cd2929ff48a3c2ea0712b1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8921433c90cd2929ff48a3c2ea0712b1_JaffaCakes118
-
Size
12KB
-
MD5
8921433c90cd2929ff48a3c2ea0712b1
-
SHA1
f5282376a34e7be9eafdaaafbe8d6bdab7225523
-
SHA256
e095232bcb7e7f811b943bf76f25edae7cf161186e8373cdc02f31d26e76e671
-
SHA512
0340a1678ee62ff14d2f445f721ecfa9e5c0c69e3f11713f5360d85ec2c0797f7f8f352552ce41b16a6025c398a82b8462c6cfc9d392b63730d91437d570fa4e
-
SSDEEP
384:JHg2yHBT3OKy4VqaKdTGWggX4yIlKdvxHNZoOquAZ/:eTBqKfVqBdTcgXBGKdvxnNPA1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8921433c90cd2929ff48a3c2ea0712b1_JaffaCakes118
Files
-
8921433c90cd2929ff48a3c2ea0712b1_JaffaCakes118.dll windows:4 windows x86 arch:x86
42b255607784b249bdea95171f5bbc2f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wininet
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetCloseHandle
InternetGetConnectedState
kernel32
GetTickCount
GetVersionExA
OutputDebugStringA
WaitForSingleObject
CreateEventA
CloseHandle
OpenEventA
CreateThread
WinExec
GetTempFileNameA
WriteFile
CreateFileA
CreateDirectoryA
GetSystemDirectoryA
HeapReAlloc
HeapAlloc
ExitThread
TerminateThread
GetLastError
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
ReadFile
SetEndOfFile
SetFilePointer
GetFileAttributesA
lstrlenA
GetProcessHeap
HeapFree
Sleep
CreateProcessA
user32
wsprintfA
advapi32
CryptDecrypt
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
CryptDestroyKey
RegQueryValueExA
RegSetValueExA
RegCloseKey
CryptReleaseContext
CryptDestroyHash
RegCreateKeyExA
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ