Static task
static1
Behavioral task
behavioral1
Sample
b51c5a046439f69b9c0b74462b48fd27_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b51c5a046439f69b9c0b74462b48fd27_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b51c5a046439f69b9c0b74462b48fd27_JaffaCakes118
-
Size
64KB
-
MD5
b51c5a046439f69b9c0b74462b48fd27
-
SHA1
85c505981e49ee7011e4f4871e99cd93c27524e1
-
SHA256
45834c86a827587dc2febf28689c741a65c22d1b2cccad3db6094f43532d24c1
-
SHA512
179a5524e1838538222f518e2f3a0ac51ca79dc29dab530614c1829179a2dc808054e27fb937c04bd6ca2d13db729a8fa370f0ee93f0968224e9fe01aecf296f
-
SSDEEP
768:/LCAw8DlPe+ssECXnjXRkCPLBLu3CMHScCBqvr7HlICDOYa+lloxGP8u0:/+AtasECX1kFSMsw3ROYa+pEu0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b51c5a046439f69b9c0b74462b48fd27_JaffaCakes118
Files
-
b51c5a046439f69b9c0b74462b48fd27_JaffaCakes118.dll windows:4 windows x86 arch:x86
09abc5b00e573850662b45518534c49c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenA
GetWindowsDirectoryA
GetProcessHeap
HeapAlloc
HeapFree
lstrcpynA
GetSystemInfo
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
lstrcpyA
lstrcatA
CreateFileA
CloseHandle
GetLastError
GetPrivateProfileIntA
GetSystemDirectoryA
GetPrivateProfileStringA
DisableThreadLibraryCalls
GlobalFree
GetCommandLineA
VirtualProtect
GetVersionExA
GlobalAlloc
user32
CharPrevA
LoadStringA
CharNextA
wsprintfA
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegOpenKeyExA
RegCloseKey
AddAccessAllowedAce
GetSidSubAuthority
InitializeSid
GetSidLengthRequired
RegQueryValueExA
RegEnumValueA
InitializeAcl
msvcr71
_onexit
__dllonexit
__CppXcptFilter
_adjust_fdiv
_except_handler3
free
_initterm
malloc
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 866B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ