prtsks
Static task
static1
Behavioral task
behavioral1
Sample
ad72cede70162b2d04bd8a2df2ddda58_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad72cede70162b2d04bd8a2df2ddda58_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ad72cede70162b2d04bd8a2df2ddda58_JaffaCakes118
-
Size
11KB
-
MD5
ad72cede70162b2d04bd8a2df2ddda58
-
SHA1
d9d5d0726ee61fbe9f9c3e335e52f04a70dff2c5
-
SHA256
4b9f1ef1c06847d8d4171bb07ff6e7ca61129521ebecb20dcbfaa0fd89f01cd1
-
SHA512
005ed405b534b9cfc61ef2fe779b12daf1468d93d881fb0c347e370555182c25ac4c813e6030acff4bf3c9f170591cbbb9c0eb5fd46b05b4df850d66a1c65e0e
-
SSDEEP
192:HgmcuM1R62A6ClYyYB0ojTV58OrfGW5Cg9pT19pTW8c7ru9F4i3s5TaP0:AmcbjA6byYB0ojTVPrOW5x9p59p3c7rV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad72cede70162b2d04bd8a2df2ddda58_JaffaCakes118
Files
-
ad72cede70162b2d04bd8a2df2ddda58_JaffaCakes118.dll windows:4 windows x86 arch:x86
1f985f92b9d527b05e477841e8cfe9af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CharLowerA
wsprintfA
kernel32
DeviceIoControl
CreateThread
CreateNamedPipeA
CreateFileA
ExitProcess
GetProcAddress
GetProcessHeap
GetSystemDefaultLangID
ExitThread
GetTickCount
GetModuleFileNameA
GetSystemDirectoryA
ConnectNamedPipe
RtlZeroMemory
Sleep
_llseek
_lread
CloseHandle
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
LoadLibraryA
HeapAlloc
HeapFree
_lwrite
advapi32
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
ws2_32
accept
bind
closesocket
connect
WSAStartup
gethostbyname
htons
inet_addr
listen
recv
send
shutdown
socket
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ