ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
8e9727506238f5da8b0c1c5d69c260ff_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8e9727506238f5da8b0c1c5d69c260ff_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8e9727506238f5da8b0c1c5d69c260ff_JaffaCakes118
-
Size
133KB
-
MD5
8e9727506238f5da8b0c1c5d69c260ff
-
SHA1
1c6f83f7ec5c6aeb114ce74a747a813c5126efe6
-
SHA256
821d2fca9710338125df161189f88d8072c2a2b5cbda632cd1736e40492ad264
-
SHA512
5fe41b07ee620e70895afa8ba3d7009f0bfccf36a46c290e307b568581f895ee15d91c128c54db9742a8bc1146eddcfa04ffeaf48f518aa368df4fa0f79f9a82
-
SSDEEP
1536:35lcsVofIpzt4yLrJkXW8Qs5mf5MGaLcrhZnHxylJfnyLvLV+mSg0H:3/csqgj4SJkmVRfrDRyATMmK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e9727506238f5da8b0c1c5d69c260ff_JaffaCakes118
Files
-
8e9727506238f5da8b0c1c5d69c260ff_JaffaCakes118.dll windows:4 windows x86 arch:x86
214411f19a4601afcd0f1735d88fb61f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
VirtualProtect
advapi32
RegSetValueExA
gdi32
StretchDIBits
user32
mouse_event
shell32
ShellExecuteA
avicap32
capGetDriverDescriptionA
wsock32
WSACleanup
Exports
Exports
Sections
CODE Size: - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ