iTunescrtLite
Static task
static1
Behavioral task
behavioral1
Sample
a19db1b7fb46816439e4c3bb2597bdb7_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a19db1b7fb46816439e4c3bb2597bdb7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a19db1b7fb46816439e4c3bb2597bdb7_JaffaCakes118
-
Size
144KB
-
MD5
a19db1b7fb46816439e4c3bb2597bdb7
-
SHA1
d90d29ac387ec152a50eaad2f7077f1180dd2ebd
-
SHA256
d645efd7a1681b786aaa43d4a47ca1d451583ca6f1969040847d2b982ed220c6
-
SHA512
e299b8550978102bd3807a415bb16c5484090250432e3200448ba0ef1d1686120ff104a40c5014e86cdeaae112659f017b95a193f0333200204aad5709e98bcd
-
SSDEEP
3072:6hsqHFbgUnd6AUiA59YGVTipPxSHdQ6EguteGmBjbVE2PSXHJLtJzL2:21DAQAHYGtipJS9nuarE2M5VL2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a19db1b7fb46816439e4c3bb2597bdb7_JaffaCakes118
Files
-
a19db1b7fb46816439e4c3bb2597bdb7_JaffaCakes118.dll windows:4 windows x86 arch:x86
4aac78cb7c404df6bb434bfa7fbc6893
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalFree
GetProcAddress
HeapFree
CreateFileA
GetModuleHandleA
Sleep
HeapAlloc
OpenEventA
CreateProcessA
GetTickCount
InterlockedIncrement
EnterCriticalSection
InterlockedCompareExchange
CreateDirectoryA
GlobalAlloc
CopyFileA
GetCommandLineA
InterlockedDecrement
OpenFileMappingA
GetModuleFileNameA
LeaveCriticalSection
GetProcessHeap
CloseHandle
GetComputerNameA
CreateFileMappingA
GetLastError
TerminateProcess
ReadProcessMemory
SetLastError
WaitForSingleObject
GetVolumeInformationA
LocalFree
GetCurrentProcess
ExitProcess
CreateEventA
WriteFile
WriteProcessMemory
LoadLibraryA
MapViewOfFile
UnmapViewOfFile
CreateMutexW
ole32
CoTaskMemAlloc
OleSetContainedObject
CoCreateInstance
CoInitialize
CoUninitialize
OleCreate
CoSetProxyBlanket
CoCreateGuid
user32
TranslateMessage
GetMessageA
CreateWindowExA
KillTimer
GetCursorPos
PostQuitMessage
DestroyWindow
DefWindowProcA
GetWindowThreadProcessId
SetWindowLongA
SetTimer
GetParent
GetWindow
GetWindowLongA
GetSystemMetrics
PeekMessageA
RegisterWindowMessageA
GetClassNameA
ClientToScreen
SendMessageA
ScreenToClient
SetWindowsHookExA
FindWindowA
UnhookWindowsHookEx
DispatchMessageA
oleaut32
SysAllocString
SysStringLen
SysAllocStringLen
SysFreeString
shlwapi
UrlUnescapeW
StrStrIW
advapi32
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
GetUserNameA
OpenProcessToken
RegSetValueExA
SetTokenInformation
RegCreateKeyExA
DuplicateTokenEx
shell32
SHGetFolderPathA
Exports
Exports
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 937B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
esusd Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ