CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
ae515f95f10d982ccd84f5d4c10a1b15_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ae515f95f10d982ccd84f5d4c10a1b15_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ae515f95f10d982ccd84f5d4c10a1b15_JaffaCakes118
-
Size
80KB
-
MD5
ae515f95f10d982ccd84f5d4c10a1b15
-
SHA1
793df32f886b6c1527691e283899cd59881c981e
-
SHA256
bb4a7fdacc82a8c56bf12d6cc1641d3d0d50d0efd18f6c219cbcda979a417bb1
-
SHA512
a85b595d5d5722aee83586a1201bce186f2522c13f3c6f4043bf29e7415dbd10e9d88558cd26bdc235f5af9f6dfda432b466f9355a81552ea7fff6cde1cf4c17
-
SSDEEP
1536:I3X8SyfhwYy3IQwUh/GZwe9ngnNXBZItRM:MsSTYynpGZwe9gNXBsq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae515f95f10d982ccd84f5d4c10a1b15_JaffaCakes118
Files
-
ae515f95f10d982ccd84f5d4c10a1b15_JaffaCakes118.dll windows:4 windows x86 arch:x86
a665833a32c83bf1fa974d381e06b92f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenA
GetProcessHeap
LoadLibraryA
GetProcAddress
MapViewOfFile
SetLastError
InitializeCriticalSectionAndSpinCount
GetSystemInfo
VirtualProtect
InterlockedExchange
CopyFileA
GetSystemTimeAsFileTime
VirtualQuery
GetFullPathNameW
GlobalFlags
GetEnvironmentVariableW
GetFileTime
HeapSetInformation
WriteConsoleW
SetProcessWorkingSetSize
GetThreadContext
LoadResource
GetProfileIntW
VirtualQueryEx
GetWindowsDirectoryA
SetEnvironmentVariableA
lstrcmpiA
EscapeCommFunction
LocalFlags
TerminateProcess
CreateProcessW
GetShortPathNameA
DeleteTimerQueue
GlobalFree
FlushFileBuffers
SetCommMask
SetVolumeLabelA
ResumeThread
CancelWaitableTimer
ReadFile
SetErrorMode
IsValidLocale
FreeConsole
GetUserDefaultLCID
GlobalMemoryStatusEx
FileTimeToSystemTime
GetStringTypeExW
MoveFileA
DeleteCriticalSection
VerifyVersionInfoW
CreateMailslotA
CreateEventW
DeviceIoControl
FindClose
DuplicateHandle
lstrcpynW
GetEnvironmentVariableA
GlobalFindAtomW
TryEnterCriticalSection
GetConsoleMode
SetConsoleCursorPosition
BindIoCompletionCallback
GetDateFormatW
ActivateActCtx
GetTempFileNameW
CreateActCtxW
OpenFile
IsBadWritePtr
CancelIo
RemoveDirectoryW
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ