WxStartup
Static task
static1
Behavioral task
behavioral1
Sample
aa0f0d35f11fa4781b5fa0a52a26cf19_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa0f0d35f11fa4781b5fa0a52a26cf19_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
aa0f0d35f11fa4781b5fa0a52a26cf19_JaffaCakes118
-
Size
11KB
-
MD5
aa0f0d35f11fa4781b5fa0a52a26cf19
-
SHA1
1db738241989848f7ecb0a16c177dca5cd74fa29
-
SHA256
a3947eb1b291b00389aa17da1f8c35b98dbee9f511fa634479f13d355bc599f4
-
SHA512
f3f7ff33331c010d08f6847a57956025022a5782509f5b1b12a9408f0d3a6a06ce0f2c4f0dcba830bf128c724c07639ce71f1a95555b9ba25adc847d99732e0c
-
SSDEEP
192:E1KPruewEOPbUiivJyDCZA7KR7Az9i67BseZzaluW9tXVS/:guruewdP8n67KR7Axi67BseZzalR9tXg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa0f0d35f11fa4781b5fa0a52a26cf19_JaffaCakes118
Files
-
aa0f0d35f11fa4781b5fa0a52a26cf19_JaffaCakes118.dll windows:5 windows x86 arch:x86
6f6d0988d825034e7c001c9c0acef1df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameW
CreateFileW
GetLastError
SetLastError
MoveFileW
GlobalFree
FindClose
SetCurrentDirectoryW
DeviceIoControl
lstrcmpiW
lstrcatW
FindNextFileW
CloseHandle
GetVersion
DeleteFileW
lstrcpyW
CreateThread
GetVolumeInformationW
SetFilePointer
SetEndOfFile
ReadFile
GetFileAttributesW
Sleep
WideCharToMultiByte
GetSystemDirectoryW
GlobalAlloc
WriteFile
GetTickCount
GetComputerNameW
MoveFileExW
CreateProcessW
SetErrorMode
FindFirstFileW
user32
wsprintfW
advapi32
RegCloseKey
RegOpenKeyExW
CryptDecrypt
CryptDestroyKey
CryptGenKey
CryptEncrypt
CryptImportKey
CryptReleaseContext
CryptAcquireContextW
CryptExportKey
RegSetValueExW
RegCreateKeyExW
shell32
ord64
ntdll
memset
RtlInitUnicodeString
memmove
ZwLoadDriver
wininet
HttpSendRequestW
InternetSetOptionW
HttpQueryInfoW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetReadFile
HttpOpenRequestW
ws2_32
gethostname
htons
gethostbyname
shlwapi
PathRemoveFileSpecW
StrToIntW
PathAppendW
SHDeleteKeyW
PathFindFileNameW
iphlpapi
GetAdaptersInfo
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ