Static task
static1
Behavioral task
behavioral1
Sample
bea1ea6bc9133e20334c52e7283d65df_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
bea1ea6bc9133e20334c52e7283d65df_JaffaCakes118
-
Size
154KB
-
MD5
bea1ea6bc9133e20334c52e7283d65df
-
SHA1
4c77452d36abaf60ebfe2801c1c6a44f62e4d0d6
-
SHA256
1b0c05f9abcc369f7d59d8c1bb0d13a6520bc646de1fa7abdc7183dcf877ba34
-
SHA512
9fff719acffd5b06e9c4a0f6458264857761c63f53056521cb5c9e58471268fe450e0191e3272d60f78cbe079dc01af6f1b38d97ae26cc7bd3c9550ca0064c8b
-
SSDEEP
3072:TqyUQO6C2ZM+xc7HUO9hhm894CEHUXgWaJRMrCzm5keBZjmoq9:eAOhEuHpPWjqYJKNXjm5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bea1ea6bc9133e20334c52e7283d65df_JaffaCakes118
Files
-
bea1ea6bc9133e20334c52e7283d65df_JaffaCakes118.dll windows:4 windows x86 arch:x86
3f35da5c1a9bff24080a7fcca3baf9d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersionExA
LoadLibraryA
GetProcAddress
GetUserDefaultLCID
Sleep
GetLocalTime
VirtualAlloc
VirtualProtect
DosDateTimeToFileTime
GetLastError
GetCurrentThreadId
IsBadStringPtrA
GetCurrentProcess
IsBadCodePtr
IsBadWritePtr
MulDiv
IsBadReadPtr
user32
GetDesktopWindow
IsIconic
GetTopWindow
GetWindowInfo
IsWindowUnicode
GetWindowContextHelpId
GetWindowRect
IsCharAlphaNumericA
GetDC
GetIconInfo
CopyIcon
IsChild
IsMenu
SetLastErrorEx
BlockInput
GetWindow
GetAncestor
GetLastActivePopup
advapi32
IsValidSid
InitializeSecurityDescriptor
IsValidAcl
msvcrt
ldiv
_CIpow
_CIsinh
_adjust_fdiv
malloc
_initterm
free
_memicmp
memchr
_swab
_memccpy
_set_error_mode
frexp
_hypot
_pctype
_isctype
ldexp
__mb_cur_max
div
rand
gdi32
GetPixel
GdiFlush
GetStretchBltMode
ole32
CoFileTimeNow
CoRevertToSelf
shell32
DuplicateIcon
ord524
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ