vojlxs
Static task
static1
Behavioral task
behavioral1
Sample
a20ca81069e7eb52c62b1b4da8df36ab_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a20ca81069e7eb52c62b1b4da8df36ab_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a20ca81069e7eb52c62b1b4da8df36ab_JaffaCakes118
-
Size
17KB
-
MD5
a20ca81069e7eb52c62b1b4da8df36ab
-
SHA1
71755afbe3e1b8990fc08b9bb314ab58ae8107be
-
SHA256
dc56e3be89166d3fd4c782bd35fdadbb970675200db5db9b50e4fac336d8f467
-
SHA512
aafe1b1c11bfd0a3a4b1f3fc7ac5f6df69350bfd4134b42f2141c0c259480d3f46a54849fe999280db936daec851ac5711a983b1f6e0d3588799dad4efe3488a
-
SSDEEP
192:RUZYQiEtFXfpZGKx3frthJ384C7nb8vSq1MHpKvY3XrMdjN73aqAJACNRh9:i6EtZpUwDfJ38D8vSq1MHpD78mnJxn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a20ca81069e7eb52c62b1b4da8df36ab_JaffaCakes118
Files
-
a20ca81069e7eb52c62b1b4da8df36ab_JaffaCakes118.dll windows:4 windows x86 arch:x86
f626e47130583f7cd04436ea0d695dc3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CallWindowProcW
RegisterClassExW
UpdateWindow
TranslateMessage
ShowWindow
SetWindowTextA
SetTimer
SetFocus
SendMessageA
RegisterClassExA
PostQuitMessage
MoveWindow
MessageBoxA
MessageBeep
LoadIconA
LoadCursorA
GetSystemMetrics
GetMessageA
GetDlgItem
EndPaint
EndDialog
DispatchMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
CreateCaret
wsprintfA
kernel32
FreeLibrary
lstrlenA
lstrcatA
WriteFile
SystemTimeToFileTime
Sleep
RtlZeroMemory
RtlMoveMemory
ReadFile
OpenMutexA
LoadLibraryExA
LoadLibraryA
InitializeCriticalSection
GlobalMemoryStatus
GetTickCount
GetSystemTime
GetProcessHeaps
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FlushViewOfFile
ExitThread
ExitProcess
DeviceIoControl
CreateFileA
CloseHandle
comdlg32
GetSaveFileNameA
GetOpenFileNameA
gdi32
GetStockObject
ws2_32
socket
setsockopt
recv
connect
shlwapi
PathUnquoteSpacesA
PathGetArgsA
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ