Static task
static1
Behavioral task
behavioral1
Sample
893937e0ed567cb925ba4ed33f4347c4_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
893937e0ed567cb925ba4ed33f4347c4_JaffaCakes118
-
Size
166KB
-
MD5
893937e0ed567cb925ba4ed33f4347c4
-
SHA1
900b7394aea53a612bb82effd225ceebbfc5b108
-
SHA256
87fc755ce23215d67e53e4f37a7c1f677369e53176c9bf9a945cb71b23233bf7
-
SHA512
fb99337fe8bd65fe41f6de5d26dfdda7f25a5261c902861f249a0665f5905e4a7bf3a41197d222b3c9c279fd8c80fe2002c48796805fa80663ad87505024a13c
-
SSDEEP
3072:4+Pb9qxMFUThpwtj6wZ346tt/vM3EsrhLwCq9/TedjuITwp7Mp+xPFtm:bsZhpmB46L/v6EqwCq9+uIT07MEPu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 893937e0ed567cb925ba4ed33f4347c4_JaffaCakes118
Files
-
893937e0ed567cb925ba4ed33f4347c4_JaffaCakes118.dll windows:4 windows x86 arch:x86
34ff7315baf80bb9c7f8d0e180b8a8e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedExchangeAdd
GetModuleFileNameA
GetProcAddress
GetVersion
GetStartupInfoA
VirtualAlloc
VirtualProtect
VirtualQuery
GetComputerNameA
IsBadWritePtr
InterlockedExchange
InterlockedDecrement
LoadLibraryA
Sleep
QueryPerformanceCounter
IsDebuggerPresent
user32
GetCursor
GetClientRect
GetWindowTextA
IsCharLowerA
IsCharUpperA
IsCharAlphaNumericA
IsCharAlphaA
GetWindowRgn
GetWindowDC
IsClipboardFormatAvailable
GetDC
WindowFromDC
GetIconInfo
GetAncestor
GetTitleBarInfo
GetWindowInfo
GetTopWindow
GetGUIThreadInfo
GetParent
GetWindowPlacement
GetDesktopWindow
IsMenu
InSendMessage
SetLastErrorEx
IsWindowUnicode
advapi32
InitializeSecurityDescriptor
msvcrt
_pctype
_adjust_fdiv
malloc
_initterm
free
_swab
_ultoa
_set_error_mode
rand
_CIsinh
_CIpow
ldiv
_itoa
localeconv
__doserrno
ldexp
_isctype
modf
frexp
__mb_cur_max
gdi32
GetStretchBltMode
GdiGetBatchLimit
GetROP2
GetBkColor
GetBitmapDimensionEx
ole32
CoDosDateTimeToFileTime
CoGetCurrentProcess
shell32
DuplicateIcon
ord680
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ