smiAuthenticationWan
Static task
static1
Behavioral task
behavioral1
Sample
a2a14f1312ff65646c780b8fa37d3783_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a2a14f1312ff65646c780b8fa37d3783_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a2a14f1312ff65646c780b8fa37d3783_JaffaCakes118
-
Size
128KB
-
MD5
a2a14f1312ff65646c780b8fa37d3783
-
SHA1
65988668f48944d4f64afe9770cc08f7593a070d
-
SHA256
9af0b93dd283c1469b748d98dabb6a90ffd94e9830d0eefd17082de2ffeac67a
-
SHA512
32c5185ef776b70d227fe35d47b9760314b60383cafd555a0255c1fff266e646c6f48ab6eec124f149a6d7f6ded24bc2e03b8eba49bfa890a9c4cb9b023504f2
-
SSDEEP
3072:4yvgl9Emo811O3wQP8epQej5CqZvpRSyuYqAaYXdTf:ZUSN13w3HeXpANkXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2a14f1312ff65646c780b8fa37d3783_JaffaCakes118
Files
-
a2a14f1312ff65646c780b8fa37d3783_JaffaCakes118.dll windows:4 windows x86 arch:x86
55c6095e218abeb296409130eb92529c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateEventA
WaitForSingleObject
GetModuleHandleA
InterlockedDecrement
GetProcAddress
InterlockedIncrement
SetLastError
CloseHandle
ExitProcess
CreateProcessA
OpenEventA
InterlockedCompareExchange
LoadLibraryA
EnterCriticalSection
MapViewOfFile
GetTickCount
GetModuleFileNameA
lstrlenW
lstrlenA
LeaveCriticalSection
CreateDirectoryA
Sleep
ReleaseMutex
CopyFileA
GetCommandLineA
UnmapViewOfFile
GetLastError
LocalFree
ole32
OleSetContainedObject
CreateBindCtx
CoUninitialize
CoCreateGuid
CoInitialize
OleCreate
user32
GetClassNameA
RegisterWindowMessageA
GetWindowLongA
DispatchMessageA
PostMessageA
DefWindowProcA
KillTimer
PostQuitMessage
GetParent
SetWindowLongA
GetMessageA
GetSystemMetrics
SendMessageA
SetTimer
FindWindowA
DestroyWindow
CreateWindowExA
TranslateMessage
oleaut32
SysAllocStringLen
SysAllocString
SysFreeString
shlwapi
UrlUnescapeW
StrStrIW
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
Exports
Exports
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ