d3dMainmon2
Static task
static1
Behavioral task
behavioral1
Sample
aab16248cb34899959804871cf6b494e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aab16248cb34899959804871cf6b494e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
aab16248cb34899959804871cf6b494e_JaffaCakes118
-
Size
116KB
-
MD5
aab16248cb34899959804871cf6b494e
-
SHA1
0ad988df63333d83224ac98d5da62b23460bbdef
-
SHA256
82ae15b4e1a393d5611d4cd61bd9b921f3fed15541dbd5a1fd4a20bc12a86ae0
-
SHA512
fc658c4d9ec5c44845d64ce4a8a3299d031c7642f82c33308c48cf0eb400f4b20e0d434d53fa7c8f48370757989554d3dec916bfe97cdbd690a99eee8fe2820e
-
SSDEEP
1536:xUVe038MgfkGgKsYFfx8zfTSGn1NGZpeL8dOpza3l/1oCAg9cTlH0LPu:P0MMgyKsz7nXGjL0pe3N1oCAucZH0LP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aab16248cb34899959804871cf6b494e_JaffaCakes118
Files
-
aab16248cb34899959804871cf6b494e_JaffaCakes118.dll windows:4 windows x86 arch:x86
98a590b5abb7da3f6f2366c4cb234e3b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
OpenEventA
UnmapViewOfFile
LeaveCriticalSection
InterlockedDecrement
Sleep
SetLastError
LoadLibraryA
CopyFileA
InterlockedCompareExchange
CreateEventA
GetModuleFileNameA
GetProcAddress
WaitForSingleObject
CreateProcessA
CreateDirectoryA
GetTickCount
lstrlenW
CloseHandle
ExitProcess
GetLastError
InterlockedIncrement
EnterCriticalSection
GetModuleHandleA
GetCommandLineA
lstrlenA
LocalFree
ReleaseMutex
MapViewOfFile
ole32
CreateBindCtx
CoInitialize
OleCreate
OleSetContainedObject
CoUninitialize
CoCreateGuid
user32
RegisterWindowMessageA
SetWindowLongA
DispatchMessageA
CreateWindowExA
PostMessageA
SendMessageA
FindWindowA
GetParent
GetMessageA
SetTimer
GetClassNameA
PostQuitMessage
GetSystemMetrics
GetWindowLongA
KillTimer
DestroyWindow
TranslateMessage
DefWindowProcA
oleaut32
SysAllocString
SysAllocStringLen
SysFreeString
advapi32
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
Exports
Exports
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ