Static task
static1
Behavioral task
behavioral1
Sample
beefeb74d14a81473744066698f53fc8_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
beefeb74d14a81473744066698f53fc8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
beefeb74d14a81473744066698f53fc8_JaffaCakes118
-
Size
105KB
-
MD5
beefeb74d14a81473744066698f53fc8
-
SHA1
5ea34d4a7ece25bb1bd401f9601b62b099bb46b6
-
SHA256
4d11d6c4577755a62ab26843afb033773efdb34e15c3178531b62b85de3c5e70
-
SHA512
0f8f0454647def43e9347ff90ae44b39002cc8acc2dc7bf34067d631412fd30159c6c225ff696ca3f907beef3b517c1b28adeb40c28be3c7639b4bb6fda3e659
-
SSDEEP
3072:unVM//LTEUFQhGqQEP2+GldjyJcwvTj2MIj:p/fLarQEO+u6sMw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource beefeb74d14a81473744066698f53fc8_JaffaCakes118
Files
-
beefeb74d14a81473744066698f53fc8_JaffaCakes118.dll windows:4 windows x86 arch:x86
c711097dfcef30b95a2eafd5d4fb531b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetComputerNameW
LocalAlloc
LocalFree
SetUnhandledExceptionFilter
GetLocalTime
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DisableThreadLibraryCalls
WriteProfileStringW
lstrcmpiW
lstrlenW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
LoadLibraryA
FormatMessageW
CreateProcessW
CloseHandle
WaitForSingleObject
InterlockedIncrement
VirtualProtect
InterlockedDecrement
GetCommandLineA
QueryPerformanceCounter
HeapReAlloc
VirtualAlloc
RtlUnwind
GetVersionExA
VirtualQuery
ExitProcess
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
GetSystemInfo
user32
SendNotifyMessageW
GetParent
DefDlgProcW
LoadStringW
SendMessageW
EnableWindow
ShowWindow
GetDlgItem
advapi32
RegOpenKeyW
RegQueryValueExW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
ole32
CoCreateGuid
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ