HornetSetup
Static task
static1
Behavioral task
behavioral1
Sample
ac36b5f0e0fb288c20beb9b05af116f9_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
ac36b5f0e0fb288c20beb9b05af116f9_JaffaCakes118
-
Size
276KB
-
MD5
ac36b5f0e0fb288c20beb9b05af116f9
-
SHA1
bc0f57c29cfba733f0f192ff6e37a3f8aad51c8d
-
SHA256
42f7cf6b2300f03b3053b6deb2098422d2396b5a192c6d4dc7a0a023051476c9
-
SHA512
ad9eeb1e005d9eaf905ee0d6c63c6328a97c11378dc45931806a494f71a333349f8d1353428902cce941fd6421097a88538f1917045faf95eea630730b1c3232
-
SSDEEP
3072:j06oaeB4MwtFOXfFeyqtj+kgF+wYWQadASrZpfZG/+bgAj25W8uXimAkjDT:j0NPdmB+kgw7K60ZjG0gAi5Iyh0DT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac36b5f0e0fb288c20beb9b05af116f9_JaffaCakes118
Files
-
ac36b5f0e0fb288c20beb9b05af116f9_JaffaCakes118.dll windows:4 windows x86 arch:x86
269ce2f8d385c5a97f7e7e1c7b03c4ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
psapi
GetModuleBaseNameA
EnumProcesses
EnumProcessModules
setupapi
SetupDiGetDeviceInstallParamsA
SetupDiGetSelectedDriverA
SetupDiGetDriverInfoDetailA
SetupGetInfInformationA
SetupQueryInfOriginalFileInformationA
SetupDiSetDeviceInstallParamsA
SetupCloseInfFile
SetupFindFirstLineA
SetupGetStringFieldA
SetupOpenInfFileA
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceRegistryPropertyA
SetupCopyOEMInfA
kernel32
LoadLibraryA
RtlUnwind
InitializeCriticalSection
GetLocaleInfoA
CloseHandle
OpenProcess
WriteFile
HeapSize
GetLastError
GlobalAlloc
CreateFileA
SetErrorMode
GetDriveTypeA
GetLogicalDriveStringsA
Sleep
WideCharToMultiByte
lstrcmpiA
GetFullPathNameA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CreateDirectoryA
GetModuleHandleA
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
MultiByteToWideChar
LCMapStringW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
ExitProcess
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
advapi32
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE