_FJ_XLG@4
Static task
static1
Behavioral task
behavioral1
Sample
89f877aa6418e29fdaf81e5662d8a986_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
89f877aa6418e29fdaf81e5662d8a986_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
89f877aa6418e29fdaf81e5662d8a986_JaffaCakes118
-
Size
44KB
-
MD5
89f877aa6418e29fdaf81e5662d8a986
-
SHA1
ed80d4ec3dad17d40901a98eddda1bae7343f0c1
-
SHA256
6a3c3dd8dd0223557d34199ed6fa6d4712770893aab9745f12b5ffb93629e094
-
SHA512
1cae8786c59ba14098e83b9262b88c3d8ec8543b294517d17ce909a08a67efccf38f0921be7150add8f504ba56ec78c42e7188be6917a31e609d8be9bf2d810d
-
SSDEEP
384:R1Pp4XIMbz2aWCqIndPpRYhZHi/YNMoIPtUYCz3jmGdsqWyciBWow6W:LpyIMbKaWCmhs/oiF+z3yGTm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89f877aa6418e29fdaf81e5662d8a986_JaffaCakes118
Files
-
89f877aa6418e29fdaf81e5662d8a986_JaffaCakes118.dll windows:4 windows x86 arch:x86
aa83d7a9b3e9c662f27d224b3a622e1b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTickCount
IsBadReadPtr
CreateThread
GetPrivateProfileStringA
GetWindowsDirectoryA
Sleep
VirtualAlloc
ExitProcess
WritePrivateProfileStringA
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
CloseHandle
UnmapViewOfFile
GetProcAddress
GetModuleHandleA
OutputDebugStringW
WideCharToMultiByte
GetCommandLineA
GetFileAttributesA
FreeLibraryAndExitThread
SetEvent
OpenEventA
GetModuleFileNameA
GlobalLock
GlobalUnlock
IsBadWritePtr
VirtualProtect
GlobalAlloc
GlobalFree
user32
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
ws2_32
connect
WSACleanup
setsockopt
send
recv
gethostbyname
inet_ntoa
inet_addr
htons
socket
WSAStartup
closesocket
msvcrt
strcat
atoi
strstr
memcmp
free
malloc
_initterm
_adjust_fdiv
srand
rand
strchr
strcpy
strlen
strncpy
_snprintf
memset
memcpy
sprintf
strcmp
_strlwr
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ