Static task
static1
Behavioral task
behavioral1
Sample
89d64f7f6e449a80a9a000b848bf208c_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
89d64f7f6e449a80a9a000b848bf208c_JaffaCakes118
-
Size
159KB
-
MD5
89d64f7f6e449a80a9a000b848bf208c
-
SHA1
b87522de1e7d8f1ebea6982817418cf5cc633441
-
SHA256
5b73a4b31ee05697c7ab645550e502003076961487f6e28befcff51f5e78f499
-
SHA512
9b449d6ecb6a045e9b796c2068c94b34bc4b971fdd06f44775a634ad04a9dd1cc64cf9d1a472fdbb7eadfba0ad80cc2e2bf629d82f6a30286b786d4b81515f3a
-
SSDEEP
3072:4+Pb9qxMFUThpwtj6wZ346tt/vM3EsrhLwCq9/TedjuITwp7Mp+xPFR:bsZhpmB46L/v6EqwCq9+uIT07MEP3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89d64f7f6e449a80a9a000b848bf208c_JaffaCakes118
Files
-
89d64f7f6e449a80a9a000b848bf208c_JaffaCakes118.dll windows:4 windows x86 arch:x86
34ff7315baf80bb9c7f8d0e180b8a8e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedExchangeAdd
GetModuleFileNameA
GetProcAddress
GetVersion
GetStartupInfoA
VirtualAlloc
VirtualProtect
VirtualQuery
GetComputerNameA
IsBadWritePtr
InterlockedExchange
InterlockedDecrement
LoadLibraryA
Sleep
QueryPerformanceCounter
IsDebuggerPresent
user32
GetCursor
GetClientRect
GetWindowTextA
IsCharLowerA
IsCharUpperA
IsCharAlphaNumericA
IsCharAlphaA
GetWindowRgn
GetWindowDC
IsClipboardFormatAvailable
GetDC
WindowFromDC
GetIconInfo
GetAncestor
GetTitleBarInfo
GetWindowInfo
GetTopWindow
GetGUIThreadInfo
GetParent
GetWindowPlacement
GetDesktopWindow
IsMenu
InSendMessage
SetLastErrorEx
IsWindowUnicode
advapi32
InitializeSecurityDescriptor
msvcrt
_pctype
_adjust_fdiv
malloc
_initterm
free
_swab
_ultoa
_set_error_mode
rand
_CIsinh
_CIpow
ldiv
_itoa
localeconv
__doserrno
ldexp
_isctype
modf
frexp
__mb_cur_max
gdi32
GetStretchBltMode
GdiGetBatchLimit
GetROP2
GetBkColor
GetBitmapDimensionEx
ole32
CoDosDateTimeToFileTime
CoGetCurrentProcess
shell32
DuplicateIcon
ord680
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ