oleWebext
Static task
static1
Behavioral task
behavioral1
Sample
bc14194ccb561d970ef1f9095cba000e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bc14194ccb561d970ef1f9095cba000e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bc14194ccb561d970ef1f9095cba000e_JaffaCakes118
-
Size
80KB
-
MD5
bc14194ccb561d970ef1f9095cba000e
-
SHA1
a7a155f45a48105bb59e6a9571a84c7b36e8cf95
-
SHA256
10b0a1cac7faff6a62addfb3b64c71392bc20c8fb5903b36e41a6663b3195b34
-
SHA512
51f9f4d9d0d9e94f9f45510622244eb6b032376e91026dde9cbd053eee257bd5c24a5edc90e627008f0a8e0bd69af64540e1a6eea484b8005b1b94b52ecd2394
-
SSDEEP
1536:G/NQfwAxZ9uLJOLbzpMt1TxshZ6PTeSBuHEZEbVAMcrOwGH2XtuW:G/2fwqDuUzpG1tshZeeAQbV9crOwyW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc14194ccb561d970ef1f9095cba000e_JaffaCakes118
Files
-
bc14194ccb561d970ef1f9095cba000e_JaffaCakes118.dll windows:4 windows x86 arch:x86
939ef2a8ed4c95aeb142e7aae79d66ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
WaitForSingleObject
SetLastError
CloseHandle
LoadLibraryA
VirtualProtect
GetProcAddress
lstrlenW
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetComputerNameA
GetModuleFileNameA
GetSystemDirectoryA
FindActCtxSectionStringW
GetCurrentDirectoryW
Beep
ReadConsoleInputW
GetComputerNameExW
CreateMailslotW
GlobalFlags
GetStringTypeExW
ReadFile
GetCurrentThread
TryEnterCriticalSection
GetSystemDefaultLangID
GetTempPathW
GetLargestConsoleWindowSize
GetModuleHandleW
UpdateResourceA
HeapUnlock
CreateTimerQueueTimer
SetWaitableTimer
GetFileAttributesA
WriteProfileStringA
GlobalAlloc
GetNumberFormatW
PeekNamedPipe
GlobalFindAtomA
FindNextChangeNotification
GetProcessVersion
GetFullPathNameW
GlobalMemoryStatus
FreeConsole
SetProcessWorkingSetSize
LoadResource
TerminateThread
EnumResourceNamesW
ActivateActCtx
GetTempFileNameW
GetStartupInfoA
MoveFileExW
GetSystemDirectoryW
GetConsoleMode
LocalFlags
CreateMailslotA
FileTimeToDosDateTime
BackupRead
DeleteCriticalSection
CreateTimerQueue
IsBadHugeReadPtr
GetCommModemStatus
LocalHandle
shlwapi
SHGetValueW
wvnsprintfW
PathRemoveBlanksW
PathIsDirectoryA
PathStripPathW
PathAppendA
PathIsURLW
SHCreateStreamOnFileW
PathMatchSpecW
StrNCatW
PathFindFileNameA
PathCanonicalizeW
UrlUnescapeW
shell32
SHChangeNotify
DragAcceptFiles
DragQueryFileW
SHCreateShellItem
ShellAboutW
SHGetFolderPathA
SHGetSpecialFolderPathA
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ