Static task
static1
Behavioral task
behavioral1
Sample
bca5ab9f454f98dec14085f35151b414_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bca5ab9f454f98dec14085f35151b414_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bca5ab9f454f98dec14085f35151b414_JaffaCakes118
-
Size
72KB
-
MD5
bca5ab9f454f98dec14085f35151b414
-
SHA1
ed5f47626919b0196b05cc2f8980d90b221d42df
-
SHA256
c53b911b119c9aa412a8ad48aea4ce7048e5df190bb82130ad5ede3acf020bc5
-
SHA512
98cc7440cba4187110fcd826767c37e2f9f34ed185e4f31660b4edfd8df2d9e5fdbee44e9a5478e9ca91827a14acd7802efa7bd7dce704b8539bdf92ade0b0bd
-
SSDEEP
768:DpL5acteXnMJzR5vcmiwHKnNHB6vwcCkqPTDYUbKx5NldwlV+nMrE4lrz7+hfLzc:DpMc4XMJt5p0nNnhIrxXYlonMA4lr7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bca5ab9f454f98dec14085f35151b414_JaffaCakes118
Files
-
bca5ab9f454f98dec14085f35151b414_JaffaCakes118.dll windows:4 windows x86 arch:x86
980d7e9ed6079720d3d0c0f78d7a9bbf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GetCommandLineA
VirtualProtect
GlobalFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
LocalFree
TerminateProcess
GetLocaleInfoA
CreateFileW
CloseHandle
lstrcpyW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetLocalTime
lstrcatW
lstrlenW
lstrcpynW
rpcrt4
NdrDllGetClassObject
msvcr71
memcpy
__dllonexit
_except_handler3
_amsg_exit
free
_XcptFilter
_adjust_fdiv
_onexit
_snprintf
_initterm
malloc
__CppXcptFilter
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ