ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
a243bb9b6a979bfaf7a89f0dbc50056c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a243bb9b6a979bfaf7a89f0dbc50056c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a243bb9b6a979bfaf7a89f0dbc50056c_JaffaCakes118
-
Size
34KB
-
MD5
a243bb9b6a979bfaf7a89f0dbc50056c
-
SHA1
22b576be9672d86b0fb210e7c39716d8ab60ac2b
-
SHA256
9dfb977d2668ed4ded8f98ba971d641b560f7b265771120713a76d012bab7bc2
-
SHA512
89cbfbde34f8d8df2a90ba2bdad005fd429ad2776ac4aa30ef4c9a59d40909b25f8c5fd78ee4fe591d9c3e6faa7472f7b94b3b0682f642ac092f0459c2e0783b
-
SSDEEP
384:qmxO1zlZobV7yrHWkfUTWCERBf5qAcZPdimXozwPB:psjoxWrHW7lUZ0AchdDozwPB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a243bb9b6a979bfaf7a89f0dbc50056c_JaffaCakes118
Files
-
a243bb9b6a979bfaf7a89f0dbc50056c_JaffaCakes118.dll windows:4 windows x86 arch:x86
45dfd04171a6e6b8e4f1968fdcea884a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
GetVersion
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
DisableThreadLibraryCalls
CreateThread
FreeLibraryAndExitThread
ExitProcess
ReadFile
SetFilePointer
DeleteFileA
GetSystemDirectoryA
GetStartupInfoA
WaitForSingleObject
VirtualFreeEx
CreateRemoteThread
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
lstrlenW
OpenProcess
MultiByteToWideChar
GetProcAddress
FreeLibrary
DeviceIoControl
GetCurrentProcessId
lstrcpyA
lstrcatA
LoadLibraryA
lstrlenA
lstrcmpA
CreateProcessA
user32
CharUpperA
wsprintfA
advapi32
RegOpenKeyExA
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
RegCloseKey
DeleteService
OpenSCManagerA
ControlService
wininet
InternetReadFile
HttpQueryInfoA
InternetSetOptionA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
ws2_32
inet_ntoa
gethostbyname
WSAStartup
inet_addr
shlwapi
SHDeleteKeyA
msvcrt
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
_except_handler3
strstr
strrchr
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
atoi
__CxxFrameHandler
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 718B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ