Static task
static1
Behavioral task
behavioral1
Sample
b69ab13b172d4a1076c9c7713db29fcd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b69ab13b172d4a1076c9c7713db29fcd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b69ab13b172d4a1076c9c7713db29fcd_JaffaCakes118
-
Size
18KB
-
MD5
b69ab13b172d4a1076c9c7713db29fcd
-
SHA1
30f4d1f0c82e57114ba79a41d4ee8cdf93a822f0
-
SHA256
f033a4cbb987aad796d2f2367691eca810c956c47fa3a53bd4217b95087a0ac0
-
SHA512
e64a9f36b7e02e1ff2cf5fde1c80e862e5b592df3a1418cd3cfa074ea82ac2e9b892c260341c8e56825505babb8192e055d143e11bb891778602a4316837f011
-
SSDEEP
384:IgP7eIFMSVkoz/upaDPdNe1cfrBDD8iP2mnqUf+DDYL:z7eI+6z/us7jeiBDDLqUf+I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b69ab13b172d4a1076c9c7713db29fcd_JaffaCakes118
Files
-
b69ab13b172d4a1076c9c7713db29fcd_JaffaCakes118.dll windows:4 windows x86 arch:x86
064ffdb886acb50c6765e7cedd502b68
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InitializeCriticalSection
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryA
ReadProcessMemory
SetThreadContext
OpenThread
RaiseException
WriteProcessMemory
IsBadReadPtr
GetModuleHandleA
GetCurrentProcess
GetCurrentThreadId
VirtualProtectEx
GetModuleFileNameA
CreateThread
TerminateThread
GetCurrentProcessId
CreateMutexA
GetLastError
GetComputerNameA
SetUnhandledExceptionFilter
Sleep
user32
GetWindowTextA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetForegroundWindow
GetWindowThreadProcessId
FindWindowA
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
msvcrt
free
_initterm
malloc
_adjust_fdiv
_strlwr
_stricmp
fopen
fread
fclose
wcslen
memcpy
sprintf
??2@YAPAXI@Z
strlen
strcat
strcpy
strrchr
memset
strstr
strchr
strncpy
strcmp
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdt Size: 512B - Virtual size: 153B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ