CoRegCleanup
Static task
static1
Behavioral task
behavioral1
Sample
8e62cba68484a355040abd4189f3a1d9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e62cba68484a355040abd4189f3a1d9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8e62cba68484a355040abd4189f3a1d9_JaffaCakes118
-
Size
153KB
-
MD5
8e62cba68484a355040abd4189f3a1d9
-
SHA1
777022a9ad4988640686f0a0ca7bee5465e9c0ee
-
SHA256
a069b8167f6041f4bf7fdec98083b5fad82f50a72a07eaff65fbb837c3be6215
-
SHA512
3ea3fc39cf558cf983a77d82276e8e65c10b939971ca30fee8973dd782d3edaecdfeeb36ca7b4c4e0c6b9f625a7a6c8679d36076655c7e60080e898661a591f1
-
SSDEEP
3072:mctaVqeXpoffVi/JG6SZFDc/7vGmKiSar8GwQRoVJTr7PfqxJX:mzj5offViBGm7vGTaUQCDTr7PyxJX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e62cba68484a355040abd4189f3a1d9_JaffaCakes118
Files
-
8e62cba68484a355040abd4189f3a1d9_JaffaCakes118.dll windows:4 windows x86 arch:x86
0f2d1c2fa0b2fdd4f1c86fe6d45b481d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteFileA
ExitProcess
GetACP
GetConsoleMode
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemInfo
HeapAlloc
HeapCreate
UnmapViewOfFile
WriteConsoleW
lstrcmpiA
msvcrt
time
__p__commode
_cexit
_except_handler3
free
malloc
sscanf
setlocale
user32
EndPaint
EnumWindows
RedrawWindow
IsWindowVisible
DestroyIcon
oleaut32
OleIconToCursor
VarBstrCat
VarBstrCmp
OleLoadPicture
shlwapi
SHDeleteEmptyKeyA
SHDeleteValueA
StrSpnA
ChrCmpIA
PathFindOnPathA
StrStrIA
Exports
Exports
Sections
.text Size: 74KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ