DllCanUnloadNow
Static task
static1
Behavioral task
behavioral1
Sample
a69672a1ab92c4bafc280a58b3bc1bee_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a69672a1ab92c4bafc280a58b3bc1bee_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a69672a1ab92c4bafc280a58b3bc1bee_JaffaCakes118
-
Size
20KB
-
MD5
a69672a1ab92c4bafc280a58b3bc1bee
-
SHA1
f5af4fd27f8b5c591bdd217d00b35e2c616fc562
-
SHA256
23f1d6d34fc97e96405ca19f0139b7ed2ff4a1c3178f45350172749477471118
-
SHA512
c5b51fb61896845de8ee5fd9c6f623d2a351d7d98e642000128fd9e77da3155557ad4c5f751a77a2baac571932adb27ce9ac0b6f9732e762f93a39faf8e45efb
-
SSDEEP
384:sH1ODlMVu2GUxGj4soU72DDfchbn0mjXRInQ993zPX2Wh0gcre1PnoWLP1fVdXng:q85MVCUEhoU72DDkhbn0URVtAt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a69672a1ab92c4bafc280a58b3bc1bee_JaffaCakes118
Files
-
a69672a1ab92c4bafc280a58b3bc1bee_JaffaCakes118.dll windows:4 windows x86 arch:x86
d00c978743a2de45a81b90757c7025a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenA
GetProcAddress
LoadLibraryA
Sleep
GlobalAlloc
GetLastError
CloseHandle
GlobalFree
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetTickCount
CreateMutexA
ExitThread
lstrcatA
CreateThread
DisableThreadLibraryCalls
VirtualProtect
GetModuleHandleA
lstrcmpiA
user32
wsprintfA
wininet
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 630B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ