CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
b0ee7d29a8c96670c59336b7eff79bba_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b0ee7d29a8c96670c59336b7eff79bba_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b0ee7d29a8c96670c59336b7eff79bba_JaffaCakes118
-
Size
444KB
-
MD5
b0ee7d29a8c96670c59336b7eff79bba
-
SHA1
33430d0d560f46df195a1024582bdef32868ff43
-
SHA256
1c6ba7d52de9dece67dfc5ef1d217c12d431e3a60483bf2a462bc4687b728d65
-
SHA512
6cd4b4fb7a25c1559c6d47d30cbf4edfa502428c1e9f0e8577cec3bec261ad5b045527d4c56fd88aa217980eac6b4433426e6827b1c4ad7421cc77fb2402948d
-
SSDEEP
6144:Cd9SZXnutCFMaS7rYnugmonfJXWuqQj2FtTfKR6vAA5Bwi:S9ye1aArYugmUfJXWuXetDKR6vPw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0ee7d29a8c96670c59336b7eff79bba_JaffaCakes118
Files
-
b0ee7d29a8c96670c59336b7eff79bba_JaffaCakes118.dll windows:4 windows x86 arch:x86
79bfab709a9cc119011034bfb3995264
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
IsBadWritePtr
IsBadReadPtr
GetProcAddress
GetModuleHandleA
ExitProcess
GetLastError
GetFileSize
CloseHandle
ReadFile
CreateFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
LoadLibraryA
FreeLibrary
OutputDebugStringA
lstrcmpiA
GetModuleFileNameA
OpenProcess
WriteProcessMemory
VirtualProtectEx
ReadProcessMemory
GetCurrentProcessId
GetPrivateProfileStringA
GetLocaleInfoW
SetEndOfFile
GetOEMCP
GetACP
SetStdHandle
IsBadCodePtr
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
GetVersionExA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
HeapFree
GetCommandLineA
GetVersion
HeapAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
WriteFile
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetEnvironmentVariableA
user32
MessageBoxA
GetAsyncKeyState
winmm
timeGetTime
opengl32
glColor3f
glGetFloatv
glDisable
glEnable
glColor4f
glClearColor
Exports
Exports
Sections
.text Size: 416KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ