fflf
Static task
static1
Behavioral task
behavioral1
Sample
8b225845fd67b200f2954e2533d12c9d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8b225845fd67b200f2954e2533d12c9d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8b225845fd67b200f2954e2533d12c9d_JaffaCakes118
-
Size
53KB
-
MD5
8b225845fd67b200f2954e2533d12c9d
-
SHA1
19fee847bbc096a06ae3ea9b7645ede845a589eb
-
SHA256
f35a9927ff2db849e722bd837be520e2ec19e8b93d2db9018a753226e0a83cf3
-
SHA512
1dc99f687e1c936c5c303cae47dcc0be8f819bbc70894922cff12cfea7ed9abe29e000255135533c5e0b9e400a41e47033fe3c8db06ea616db868633e46ed528
-
SSDEEP
768:QKe/44gVvJc8lM2m8afibSOhfhjxsF3PMQMz3qRBL/G6mTswurhuj17H:Qhw4gvcQM2NnWdMXz3N64swuEjF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b225845fd67b200f2954e2533d12c9d_JaffaCakes118
Files
-
8b225845fd67b200f2954e2533d12c9d_JaffaCakes118.dll windows:4 windows x86 arch:x86
fbb35586e1089f7dbd67c0322bb96445
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
SHEnumKeyExA
UrlCanonicalizeA
kernel32
Beep
DnsHostnameToComputerNameA
ExitProcess
GetBinaryTypeA
BackupSeek
lstrcmpA
SetCurrentDirectoryA
FlushViewOfFile
GetCurrentDirectoryA
GetSystemDirectoryW
HeapFree
GetComputerNameW
lstrcmpW
HeapAlloc
GetProcessHeap
GetSystemDirectoryA
advapi32
GetUserNameA
winmm
DrvGetModuleHandle
GetDriverModuleHandle
mmioOpenA
Exports
Exports
Sections
.code Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 837B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ