Static task
static1
Behavioral task
behavioral1
Sample
a98ea19d9ae6843fe16357e996b6b1e5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a98ea19d9ae6843fe16357e996b6b1e5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a98ea19d9ae6843fe16357e996b6b1e5_JaffaCakes118
-
Size
177KB
-
MD5
a98ea19d9ae6843fe16357e996b6b1e5
-
SHA1
35a1081b568af27333de3059bbf11ff7657306d7
-
SHA256
e6b0ba9eef902022309ebb4ca742d6160a5840f4ba4f4f4cdfb6995934935c7c
-
SHA512
ffce9776249cf092be2207eb9281833cecba3d7f18e42ff02b57e95951dd135fecff73f22b9d43fe5455e8d7211b6d4f97ce490034330719a631f220620e08e7
-
SSDEEP
3072:zZ+5qy9EU6nYfT9onICuCIBX6SZGUHAAzBQ3f:zZ0EU6YRongCiYKBQ3f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a98ea19d9ae6843fe16357e996b6b1e5_JaffaCakes118
Files
-
a98ea19d9ae6843fe16357e996b6b1e5_JaffaCakes118.dll windows:6 windows x86 arch:x86
7cb39e7ce8680770da4a5ccd8c316ef7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetCurrentThreadId
LoadLibraryW
GetModuleHandleW
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MultiByteToWideChar
LockResource
LocalFree
LoadResource
SizeofResource
FindResourceW
FindResourceExW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
OutputDebugStringW
LoadLibraryExW
EncodePointer
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
SetLastError
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetStdHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
CreateFileW
user32
DrawTextW
GetThreadDesktop
GetPropA
GetKeyboardState
GetKeyState
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ