Static task
static1
Behavioral task
behavioral1
Sample
b313cb4f2a745180a72a597b37124655_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b313cb4f2a745180a72a597b37124655_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b313cb4f2a745180a72a597b37124655_JaffaCakes118
-
Size
21KB
-
MD5
b313cb4f2a745180a72a597b37124655
-
SHA1
5941eac28dd466fc846f9607e3a9406358dea462
-
SHA256
40bf3bfbb977e4452de59d95d63e12e0229f34495d40bfca2cc00466a01b9829
-
SHA512
ce540278615aad7e2dc28a7f0e6d664d7e1c8ccd37cc302905e8323a52e51831f9a1d801d2e0f4cb067502addf01a2b43c44b2168f8ab82a34c7b85319fd8372
-
SSDEEP
384:vbNTLqxJOAwDJK5oW0msU/0KV6xlTX/7TG0DZKcFnt5j:vbNTLqx5p0FU/0KgPXw2H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b313cb4f2a745180a72a597b37124655_JaffaCakes118
Files
-
b313cb4f2a745180a72a597b37124655_JaffaCakes118.dll windows:4 windows x86 arch:x86
f6a10da5844a3195ec3eae083c59cb38
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
strrchr
_strupr
memcpy
_snprintf
sprintf
free
memset
malloc
_except_handler3
atoi
_initterm
_adjust_fdiv
user32
SendMessageA
DispatchMessageA
TranslateMessage
GetMessageA
RegisterDeviceNotificationA
ShowWindow
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
advapi32
SetSecurityDescriptorDacl
RegEnumValueA
RegOpenKeyA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
mpr
WNetEnumResourceA
WNetOpenEnumA
WNetCloseEnum
iphlpapi
GetAdaptersInfo
shlwapi
StrStrIA
kernel32
lstrcpynA
CreateMutexA
GetLastError
GetExitCodeThread
CreateThread
GetFileSize
GetProcessHeap
HeapAlloc
HeapFree
FreeResource
GetDriveTypeA
ExpandEnvironmentStringsA
lstrcatA
FindFirstFileA
Sleep
FindNextFileA
FindClose
GetFileAttributesExA
GetTempPathA
LockResource
LoadResource
SizeofResource
FindResourceA
DisableThreadLibraryCalls
GetLogicalDrives
WriteFile
GetTempFileNameA
lstrlenA
lstrcmpiA
GetModuleHandleA
LoadLibraryA
GetProcAddress
VirtualAlloc
LocalAlloc
MultiByteToWideChar
CloseHandle
SetFileTime
SetFilePointer
lstrcpyA
ReadFile
GetFileSizeEx
CreateFileA
SetFileAttributesA
GetFileAttributesA
VirtualFree
GetSystemDirectoryA
LocalFree
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ