Static task
static1
Behavioral task
behavioral1
Sample
a91cf07c2e360e88aa224ae36b265ed8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a91cf07c2e360e88aa224ae36b265ed8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a91cf07c2e360e88aa224ae36b265ed8_JaffaCakes118
-
Size
120KB
-
MD5
a91cf07c2e360e88aa224ae36b265ed8
-
SHA1
0113bb751cb3bb73537e442d22858a4f2f3ba2c6
-
SHA256
1b29ea093e71a72334d403219278b744795fe340b7c8b0fd581bcf19293783f5
-
SHA512
2ee232326823c17cf353f2d501e7269425bbb47c46d32f82b1e025b29c65b9ec71e0d4c805903532878340cf5aa1eda5c689aa1c0d4ce5f9613bdb44dfeed221
-
SSDEEP
3072:uVpB74r6wzdQ19q8kTF37cpEEOPOKZXoX/Lw1yEGBy:KpGr6wzdnCpahov7/By
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a91cf07c2e360e88aa224ae36b265ed8_JaffaCakes118
Files
-
a91cf07c2e360e88aa224ae36b265ed8_JaffaCakes118.dll windows:4 windows x86 arch:x86
65e1e7503412094dbe27aab8a86f4d7e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
CreateFileW
CloseHandle
SetFilePointer
DeleteFileW
GetTempFileNameW
GetTempPathW
LeaveCriticalSection
GetCurrentProcess
WaitForSingleObject
TlsFree
ResetEvent
Sleep
TerminateProcess
UnhandledExceptionFilter
InterlockedDecrement
CompareStringA
ReadFile
SetUnhandledExceptionFilter
LocalFree
LocalReAlloc
InterlockedExchange
lstrlenW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GlobalUnlock
InterlockedCompareExchange
SetLastError
FormatMessageW
GetCurrentThreadId
GlobalFree
GetCommandLineA
VirtualProtect
InterlockedIncrement
GlobalAlloc
user32
SendMessageW
CharUpperW
LoadStringW
GetClassLongW
IsWindowUnicode
DefWindowProcW
IsDlgButtonChecked
GetDlgItemTextW
CheckDlgButton
MessageBoxW
EndDialog
DefWindowProcA
SetWindowLongW
WinHelpW
EnableWindow
GetDlgItem
advapi32
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegOpenCurrentUser
RegCloseKey
ole32
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
StringFromGUID2
CoGetStandardMarshal
msvcr71
_amsg_exit
memset
_XcptFilter
_wcsicmp
realloc
free
malloc
_wtoi
wcsstr
memmove
memcpy
_onexit
_adjust_fdiv
__CppXcptFilter
__dllonexit
_initterm
_except_handler3
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ