_MyLocDllHandle
Static task
static1
Behavioral task
behavioral1
Sample
9579289e0bb82e167feeffbeaa23bc58_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9579289e0bb82e167feeffbeaa23bc58_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
9579289e0bb82e167feeffbeaa23bc58_JaffaCakes118
-
Size
72KB
-
MD5
9579289e0bb82e167feeffbeaa23bc58
-
SHA1
2f7e1bfa6f5aa6e9109c081896cd5bdc8d4ec832
-
SHA256
0907ddbaab1392b077f9d1b2f3933eeda57be355f4d00ffe37a58fbead4dda70
-
SHA512
f4cd0dcf1cbe4753122e2ead37a003d089552ce17a01b179f0be99b547bc06b192df7bc6967bf34bb47f6b394324517e76acfd1886112022b2dce32164204d78
-
SSDEEP
768:x61qVeU8EDFm1epWW8qhU8MgqjNJYZDiWa1Hf:x61qEREg1epWWlU8MgcNJY9haZf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9579289e0bb82e167feeffbeaa23bc58_JaffaCakes118
Files
-
9579289e0bb82e167feeffbeaa23bc58_JaffaCakes118.dll windows:4 windows x86 arch:x86
c0cb2754053ca04b819753022f0bc61a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc80
ord764
ord762
ord1175
ord371
ord1098
ord1084
msvcr80
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
__CppXcptFilter
free
_crt_debugger_hook
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_except_handler4_common
_unlock
kernel32
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
DisableThreadLibraryCalls
GetVersionExA
InterlockedExchange
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ