Activate
Static task
static1
Behavioral task
behavioral1
Sample
951034e8d4728268b68994ababcc2299_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
951034e8d4728268b68994ababcc2299_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
951034e8d4728268b68994ababcc2299_JaffaCakes118
-
Size
32KB
-
MD5
951034e8d4728268b68994ababcc2299
-
SHA1
ec8643f21a22880a8322a337dd64949209dab0d5
-
SHA256
84208d93c81e02ebdc94a8909a279296833b1caa77d3b64b550ff197e669c83a
-
SHA512
d652534de10c739c29d20b989abc19842dde44baf6dd0b39c287105ed03f80306ce6070ee361481e6843852efa9e332e157277f05da841da5a97e8a8742db91c
-
SSDEEP
768:88Cnq/xdcRpNLdNRpf5BlVo5sQj837xkqODPOjczjINr8ghyfUNp:4MxdcRpNLdNRpf5BlVqsQsdORIs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 951034e8d4728268b68994ababcc2299_JaffaCakes118
Files
-
951034e8d4728268b68994ababcc2299_JaffaCakes118.dll windows:4 windows x86 arch:x86
7e965586302b15135eb058a8c79d3df4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
inet_addr
gethostbyname
kernel32
CreateFileW
LocalAlloc
lstrcpyA
lstrcatA
GetComputerNameA
CloseHandle
WaitForSingleObject
CreateEventA
lstrlenA
GetTempPathA
lstrcmpiA
lstrcpynA
GlobalFree
GlobalAlloc
lstrcmpA
DeleteFileA
LocalFree
WriteFile
CreateFileA
LoadLibraryA
GetLastError
GetTickCount
RtlUnwind
FindFirstFileA
FindNextFileA
MoveFileA
ExitProcess
CreateThread
GetModuleFileNameA
VirtualFree
VirtualAlloc
VirtualQuery
FreeLibrary
SetEvent
OpenEventA
MultiByteToWideChar
GetVersionExA
GetModuleHandleA
GetProcAddress
GetTempFileNameA
FindClose
user32
SendMessageA
EnumWindows
GetWindowThreadProcessId
PostMessageA
CharLowerA
wsprintfA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegCreateKeyA
RegEnumValueA
RegSetValueExA
RegQueryValueExA
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ