Static task
static1
Behavioral task
behavioral1
Sample
8b70e97da9b932d5a6b82ab020917b6a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8b70e97da9b932d5a6b82ab020917b6a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8b70e97da9b932d5a6b82ab020917b6a_JaffaCakes118
-
Size
36KB
-
MD5
8b70e97da9b932d5a6b82ab020917b6a
-
SHA1
543423ed8f53fe4651b54279004dfb56e84b9602
-
SHA256
06b493dcbe81b565baa5b346851382e61b329f80515fc6a02f29c4ad689ab6a3
-
SHA512
1d9b12dc56139e043ad988f3a3735ff7c737d605e24b8bda6f6ce05bba084ccd283d86feca0bc2e6472cac7720da7c7a4055778652bf66f77f93f4b1a7db4aec
-
SSDEEP
768:9XKMP72w8zTeSiCR/v174evglUc+4KIPjKon3UEsUQEhkFvZO+Q01CMiLN3v4P9:96MPAeSiU/v+evSM4KcjTn3UEsUQEhkX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b70e97da9b932d5a6b82ab020917b6a_JaffaCakes118
Files
-
8b70e97da9b932d5a6b82ab020917b6a_JaffaCakes118.dll windows:4 windows x86 arch:x86
47d0f8093753df6782fa8998b0d93ea8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
ntohl
getsockname
recvfrom
getpeername
bind
listen
WSAAccept
shutdown
WSAStartup
send
gethostbyname
setsockopt
htons
htonl
sendto
WSASocketA
ioctlsocket
connect
WSAGetLastError
select
__WSAFDIsSet
closesocket
inet_addr
inet_ntoa
recv
user32
wsprintfA
advapi32
RegOpenKeyA
RegEnumValueA
RegNotifyChangeKeyValue
RegCloseKey
RegQueryValueExA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
msvcrt
??2@YAPAXI@Z
_adjust_fdiv
floor
_strnicmp
_strdup
tolower
rand
time
fclose
??3@YAXPAX@Z
fwrite
_initterm
fopen
system
_ftol
strstr
sscanf
atol
fgets
srand
sprintf
realloc
isspace
atoi
strchr
free
malloc
kernel32
GetModuleHandleA
WaitForSingleObject
CloseHandle
CreateThread
lstrcpyA
lstrcmpiA
CreateProcessA
GetProcAddress
CreateEventA
lstrlenA
ExitThread
Sleep
GetFileAttributesA
GetSystemDirectoryA
lstrcatA
GetVersionExA
GetTickCount
LeaveCriticalSection
LoadLibraryA
CreateMutexA
EnterCriticalSection
InitializeCriticalSection
GetCurrentThread
SetThreadPriority
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ