Static task
static1
Behavioral task
behavioral1
Sample
a54ed81c98b7a313a32d50d49091b7dd_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
a54ed81c98b7a313a32d50d49091b7dd_JaffaCakes118
-
Size
167KB
-
MD5
a54ed81c98b7a313a32d50d49091b7dd
-
SHA1
e235bf0d65d50854fe4874cb93f004836ef90b0b
-
SHA256
359f10ebbfceeba2948130c948e59ad02adb9018a48537e18e6c93b48062c7d9
-
SHA512
c12d8a017c2f5da7f7a51f001ee137efdfd8187dd4713f62a92a1f0f4998be0a1a42dd74ea1249234e00e275ca8b276397fb9fa1cd3d7fae10596b808faac29f
-
SSDEEP
3072:HodSoyrVSdGEpeUN8R8kq3oy5lypFgKvhGAt+HcU2FG1CRrtna5KxeEf:IrUUdGW5Lyp9x47cPnN1f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a54ed81c98b7a313a32d50d49091b7dd_JaffaCakes118
Files
-
a54ed81c98b7a313a32d50d49091b7dd_JaffaCakes118.dll windows:4 windows x86 arch:x86
80c212689c3f38876221d437922f3dae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
InterlockedExchange
InterlockedExchangeAdd
GetModuleFileNameA
GetProcAddress
GetVersionExA
MulDiv
GetSystemTimeAsFileTime
GetLocalTime
VirtualAlloc
VirtualProtect
Sleep
QueryPerformanceFrequency
IsDebuggerPresent
GetComputerNameA
GetCurrentThreadId
IsBadCodePtr
GetUserDefaultLCID
user32
GetCursor
GetWindowContextHelpId
GetWindowRect
GetWindowTextLengthA
IsCharLowerA
IsCharAlphaNumericA
GetWindowDC
CopyIcon
GetAncestor
GetTitleBarInfo
GetWindowInfo
GetTopWindow
IsZoomed
IsIconic
GetGUIThreadInfo
GetParent
InSendMessage
IsChild
GetMenuContextHelpId
advapi32
AreAnyAccessesGranted
RevertToSelf
msvcrt
_adjust_fdiv
malloc
_initterm
free
_swab
srand
_set_error_mode
ldiv
__mb_cur_max
_CIacos
_CIsinh
floor
ceil
time
localeconv
ldexp
_pctype
_isctype
_errno
gdi32
GetBitmapDimensionEx
GdiGetBatchLimit
GetStretchBltMode
ole32
CoFileTimeNow
CoDosDateTimeToFileTime
CoRevertToSelf
shell32
ord66
DuplicateIcon
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ