SystemPadapi
Static task
static1
Behavioral task
behavioral1
Sample
a38782f0b03ff676610307f0739cf469_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a38782f0b03ff676610307f0739cf469_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a38782f0b03ff676610307f0739cf469_JaffaCakes118
-
Size
112KB
-
MD5
a38782f0b03ff676610307f0739cf469
-
SHA1
e13d4cb398a11b79e00b42e924c305919cdbe320
-
SHA256
430de0e7f619530c6a3d81de1ca5ec319afe2b2c91a4fd7d298bd031f5e2eaf7
-
SHA512
534a5d8b2c7a6749d2ca75310f22eba581f6f51d72eb6d27e0723533a6ac6c43c66005de219c4bedb87302be5fac6cf4cef681bc84066b7c2a7c728f21cab91c
-
SSDEEP
1536:hPXMuIRnBvPneILgbkglPcZieYOPhmCub1t1Nw3/+u5XPwzi/fYuL0l:JUv5LZglP6iEpmCw237/ksfYuY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a38782f0b03ff676610307f0739cf469_JaffaCakes118
Files
-
a38782f0b03ff676610307f0739cf469_JaffaCakes118.dll windows:4 windows x86 arch:x86
e671c831f5ffb513f72ac942f548ba58
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenW
LoadLibraryA
GetCommandLineA
InterlockedIncrement
WaitForSingleObject
GetLastError
InterlockedDecrement
CopyFileA
LocalFree
CloseHandle
GetModuleHandleA
CreateDirectoryA
Sleep
GetModuleFileNameA
CreateEventA
LeaveCriticalSection
ReleaseMutex
ExitProcess
EnterCriticalSection
UnmapViewOfFile
CreateProcessA
OpenEventA
lstrlenA
InterlockedCompareExchange
GetProcAddress
MapViewOfFile
GetTickCount
SetLastError
ole32
OleCreate
CoInitialize
CreateBindCtx
OleSetContainedObject
CoUninitialize
CoCreateGuid
user32
SetTimer
DestroyWindow
GetMessageA
GetParent
DispatchMessageA
GetSystemMetrics
TranslateMessage
RegisterWindowMessageA
KillTimer
GetWindowLongA
PostMessageA
DefWindowProcA
SetWindowLongA
PostQuitMessage
GetClassNameA
FindWindowA
CreateWindowExA
SendMessageA
oleaut32
SysFreeString
SysAllocStringLen
SysAllocString
shlwapi
UrlUnescapeW
StrStrIW
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
Exports
Exports
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ