stop_sub_threads
Static task
static1
Behavioral task
behavioral1
Sample
8da44fa47272c1f1668558b08daddfe2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8da44fa47272c1f1668558b08daddfe2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8da44fa47272c1f1668558b08daddfe2_JaffaCakes118
-
Size
322KB
-
MD5
8da44fa47272c1f1668558b08daddfe2
-
SHA1
a72624476f412dd9542f1be96c0633f225f306b1
-
SHA256
a9a70ee9a1fbbf19cdd3e4f3a344108161b5545db25bae695ce28cadfe9c252c
-
SHA512
edbb363a4a7aad96a0f4096760ea175cf767f8a6680a74ed74a1820dcdbb68535dc00f9c05d69194352c85bbbe09ef084e4194fb536892e3915eed00f062a9e9
-
SSDEEP
6144:q9uk46rNMIhJLljsvo/CVEDpHUu63iTB5Z0c4r/:qUk46rNMoJ5jsiCGDpUu63iTzZ0dr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8da44fa47272c1f1668558b08daddfe2_JaffaCakes118
Files
-
8da44fa47272c1f1668558b08daddfe2_JaffaCakes118.dll windows:5 windows x86 arch:x86
5743208cbb333976124e491204f42a2d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetACP
FreeLibrary
OpenProcess
Sleep
TerminateProcess
CreateDirectoryA
GetLastError
GetProcAddress
MoveFileA
CloseHandle
GetTempPathA
DeleteFileA
GetTickCount
GetTempFileNameA
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
CreateFileA
GetFileSize
SetFilePointer
SetEndOfFile
GetOEMCP
ReadFile
GetLocalTime
WaitForSingleObject
LoadLibraryA
CreateProcessA
GetStartupInfoA
CreatePipe
GetDiskFreeSpaceExA
GetCurrentDirectoryA
GetFileAttributesA
FindFirstFileA
FindClose
SetVolumeLabelA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
IsValidCodePage
ExitProcess
HeapSize
LCMapStringA
WriteFile
InitializeCriticalSection
GetModuleHandleA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetLocaleInfoW
GetTimeZoneInformation
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCPInfo
FreeEnvironmentStringsA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
HeapReAlloc
HeapAlloc
GetSystemTimeAsFileTime
SetEnvironmentVariableA
GetProcessHeap
GetFileType
FlushFileBuffers
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
RtlUnwind
RaiseException
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
SetHandleCount
GetStdHandle
GetModuleFileNameA
LCMapStringW
iphlpapi
GetAdaptersInfo
ws2_32
gethostname
inet_ntoa
WSAStartup
htons
ntohs
setsockopt
WSACleanup
recv
bind
socket
gethostbyname
WSAIoctl
winhttp
WinHttpSetCredentials
WinHttpReadData
WinHttpOpenRequest
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpSendRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpReceiveResponse
WinHttpAddRequestHeaders
Exports
Exports
Sections
.text Size: 246KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ