Static task
static1
Behavioral task
behavioral1
Sample
a794a533d669761f751b75b2fc44e020_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
a794a533d669761f751b75b2fc44e020_JaffaCakes118
-
Size
161KB
-
MD5
a794a533d669761f751b75b2fc44e020
-
SHA1
4d35f3029237762d4b73514f4c34f43069856218
-
SHA256
04f090d48bd1f991108eeaa4eb428536c1de0c617f01544dbfe86b9f75c5e9d0
-
SHA512
f2c4e2e964bff3fed679427e729b3d251b5338fa257d7307af006089bd778f494f9d841f8ec15a3045a747b8f4afc64d5bbebbf4362b2eede3cf993096e48f51
-
SSDEEP
3072:cGI5Otw0+G6D16xp4JItmSQxG+3vxFYbFFmUJbQIr7xN/xayaoFBskUYn3J3ObTI:aAy0v6Dcp4JcUkAFQIoDxioFmkP5enN6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a794a533d669761f751b75b2fc44e020_JaffaCakes118
Files
-
a794a533d669761f751b75b2fc44e020_JaffaCakes118.dll windows:4 windows x86 arch:x86
16b21a777316b3978203738709873676
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
GetModuleFileNameA
GetProcAddress
GetVersion
IsDBCSLeadByte
MulDiv
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
VirtualQuery
DosDateTimeToFileTime
Sleep
SetLastError
GetLastError
GetComputerNameA
GetCurrentThreadId
GetProcessHeap
IsBadStringPtrA
IsBadWritePtr
GetStartupInfoA
user32
IsWindowUnicode
GetWindowContextHelpId
GetWindowRect
GetWindowTextA
IsCharUpperA
IsCharAlphaNumericA
IsClipboardFormatAvailable
GetDC
WindowFromDC
GetForegroundWindow
GetIconInfo
CopyIcon
GetDlgItem
GetAncestor
GetTitleBarInfo
GetWindow
GetLastActivePopup
GetWindowThreadProcessId
GetGUIThreadInfo
GetParent
BlockInput
IsChild
GetDesktopWindow
GetWindowTextLengthA
advapi32
IsValidAcl
IsValidSecurityDescriptor
InitializeSecurityDescriptor
RevertToSelf
msvcrt
_adjust_fdiv
malloc
_initterm
free
memmove
rand
_CItanh
_CIsinh
_CIacos
_CIfmod
_isctype
_CIpow
_itoa
__doserrno
_errno
_pctype
time
__mb_cur_max
gdi32
GetBkMode
GdiFlush
GetBkColor
ole32
CoGetCurrentProcess
CoFileTimeNow
CoDosDateTimeToFileTime
CoRevertToSelf
shell32
ord66
ord680
DuplicateIcon
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ