SK
Static task
static1
Behavioral task
behavioral1
Sample
b215547ccc0a8538188bf95675e1e1eb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b215547ccc0a8538188bf95675e1e1eb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b215547ccc0a8538188bf95675e1e1eb_JaffaCakes118
-
Size
24KB
-
MD5
b215547ccc0a8538188bf95675e1e1eb
-
SHA1
9e430e06299734287803b48caf42746f15022206
-
SHA256
68fb5147b13b46aedb8cca3eab17b6d109ff3845b9df1c1a54266363ca977956
-
SHA512
8971b534435ec150ef97409884d9c1e0e812df503b4833027199083421bec9f352068e32ec4593bada126290decb297224822191e5c170102dbf082c1a36ad1e
-
SSDEEP
96:0PydLeBzh9bWu2FL3lxJ+lfylLxnDxvR29YFr3mn9HKDVFBap71kSrY5fB:0ad6Bzh9jsLefiJ29YFr3y9qGcfB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b215547ccc0a8538188bf95675e1e1eb_JaffaCakes118
Files
-
b215547ccc0a8538188bf95675e1e1eb_JaffaCakes118.dll windows:4 windows x86 arch:x86
876689b220e5797e17f1a7d1654c09be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetCurrentProcess
GetProcAddress
LoadLibraryA
lstrcatA
GetCurrentProcessId
GetLocalTime
lstrcpyA
GetCurrentThreadId
user32
SetProcessWindowStation
OpenWindowStationA
GetThreadDesktop
GetProcessWindowStation
OpenDesktopA
SetThreadDesktop
SetWindowsHookExA
GetKeyboardState
ToAscii
GetActiveWindow
wsprintfA
GetWindowTextA
CallNextHookEx
msvcrt
_adjust_fdiv
malloc
_initterm
free
strlen
strcpy
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 994B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Share Size: 4KB - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ