Static task
static1
Behavioral task
behavioral1
Sample
abd83408a5cf16a2c9411eac5906a17a_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
abd83408a5cf16a2c9411eac5906a17a_JaffaCakes118
-
Size
160KB
-
MD5
abd83408a5cf16a2c9411eac5906a17a
-
SHA1
98eb02e84d317dec29e01c2e39c3e55ecc705603
-
SHA256
63dc05e0306fd55284737c04490010600c517c8ec8e433703acfbaaf38fce65e
-
SHA512
67846716dc5e55d17b1734d85c8823ec98e3e59d9cca2a82d917fa4c008344b3cf17879dbbdb3d2fa0cc70da35d8bed43987866c1d7ae7e89ef7f9490600019d
-
SSDEEP
3072:NafJttKIr30Ql0rGXGuorAKDd48pBIxnynQ50fu7oKME7mJdLM:NGJj3j0Q+2dGD7IxF50lE7mJdo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abd83408a5cf16a2c9411eac5906a17a_JaffaCakes118
Files
-
abd83408a5cf16a2c9411eac5906a17a_JaffaCakes118.dll windows:4 windows x86 arch:x86
7f1e4f1ec9e337450d7880773f5fa3e9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersion
MulDiv
GetLocalTime
GetProcAddress
VirtualProtect
DosDateTimeToFileTime
GetModuleFileNameA
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GetACP
LoadLibraryA
GetVersionExA
Sleep
IsDebuggerPresent
GetComputerNameA
IsBadWritePtr
VirtualAlloc
user32
GetTopWindow
GetWindow
GetTitleBarInfo
CopyIcon
WindowFromDC
IsClipboardFormatAvailable
GetCursor
GetMenuContextHelpId
GetWindowContextHelpId
GetWindowTextLengthA
IsIconic
GetGUIThreadInfo
GetWindowPlacement
IsChild
IsMenu
BlockInput
GetWindowRgn
GetWindowTextA
GetWindowDC
advapi32
GetUserNameA
IsValidAcl
InitializeSecurityDescriptor
IsValidSecurityDescriptor
RevertToSelf
msvcrt
_CIfmod
_itoa
__doserrno
_adjust_fdiv
malloc
_initterm
free
memchr
srand
_set_error_mode
_CIacos
time
localeconv
_pctype
_isctype
__mb_cur_max
modf
_errno
ldiv
gdi32
GetPixel
GetBkColor
GetBkMode
GetBitmapDimensionEx
GetStretchBltMode
ole32
CoGetCurrentProcess
CoDosDateTimeToFileTime
CoRevertToSelf
shell32
ord680
ord524
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ