Static task
static1
Behavioral task
behavioral1
Sample
a4d1201f56b778febd62d2bd8382d74b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a4d1201f56b778febd62d2bd8382d74b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a4d1201f56b778febd62d2bd8382d74b_JaffaCakes118
-
Size
16KB
-
MD5
a4d1201f56b778febd62d2bd8382d74b
-
SHA1
cc41285078599172f3825c2cbecaab348ec84c30
-
SHA256
197a2de85bbcf6cf2a73baa10e18c117cb6b97604f857b103167bc1b292cf270
-
SHA512
477da18448f32c47d8ad5e85ea2c05a508da7081e6831c065033c0002b42c1c5b804aee098b26633646c5bf0ff10bce138ee18bc62f1fd1b6fbf7ad97a189af1
-
SSDEEP
384:jvR1ePzOem6+d959mxFjWVENn1f1Ig9YcpTVDD45:jDT9zm/jW+Nn1fr9YAThD2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4d1201f56b778febd62d2bd8382d74b_JaffaCakes118
Files
-
a4d1201f56b778febd62d2bd8382d74b_JaffaCakes118.dll windows:1 windows x86 arch:x86
1f35af90a9983ce2e13afeae37e18fa0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateDirectoryW
CreateFileA
CreateFileW
CreateFileMappingA
CreateThread
DeleteFileA
ExitProcess
ExitThread
FindFirstFileA
FindNextFileA
FreeLibrary
GetFileSize
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetSystemDirectoryA
GetVolumeInformationA
GlobalAlloc
GlobalFree
HeapAlloc
LoadLibraryA
LocalAlloc
LocalFree
MapViewOfFile
MoveFileA
MoveFileExA
OpenFileMappingA
RemoveDirectoryA
SetFilePointer
Sleep
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WriteFile
lstrcatA
lstrcmpW
lstrcpyA
user32
CreateDialogParamW
CreateWindowExW
DefWindowProcW
ExitWindowsEx
FindWindowW
GetAsyncKeyState
GetClassInfoExW
GetCursorPos
GetDlgItem
IsDialogMessageW
IsWindowVisible
KillTimer
RegisterClassExW
SendMessageA
SetLayeredWindowAttributes
SetTimer
SetWindowLongA
SetWindowTextW
ShowWindow
wsprintfA
advapi32
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
wininet
FtpCreateDirectoryA
FtpPutFileA
FtpSetCurrentDirectoryA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
wintrust
WinVerifyTrust
shell32
SHGetFolderPathA
ShellExecuteA
StrRChrA
ntdll
RtlAdjustPrivilege
Sections
.code Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idat Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE