Static task
static1
Behavioral task
behavioral1
Sample
c1c3bc9d3d7c63df624c3eac301d10d3_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c1c3bc9d3d7c63df624c3eac301d10d3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c1c3bc9d3d7c63df624c3eac301d10d3_JaffaCakes118
-
Size
256KB
-
MD5
c1c3bc9d3d7c63df624c3eac301d10d3
-
SHA1
7b05f8fdbd5978efd436aef5292fa08a650e3a21
-
SHA256
187e0bd3ef243758df6099cae0894dbc8f5a9e6b5deb108d56641b5433ead78c
-
SHA512
9f1e92ed6cef946360a086de3b8f908b2f32d29f5be301b322f23253432d22de742601035c1974b3de1d32b30ce414f3bdc7f88c92b3deaf659aa87ea7c4c78b
-
SSDEEP
3072:Bq99kllosQnm8+ldS/uo77XKK7U6OOjCFehNNUhhmxxmUUvvvY++eFdbFHMqqDLj:DS/uCU6OOjCFe67sqqDLu4P7Y88
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1c3bc9d3d7c63df624c3eac301d10d3_JaffaCakes118
Files
-
c1c3bc9d3d7c63df624c3eac301d10d3_JaffaCakes118.dll windows:4 windows x86 arch:x86
b32797d2e502407790654e415e5af25a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
GetCommandLineA
GlobalFree
CreateSemaphoreA
CloseHandle
WaitForSingleObject
GlobalUnlock
GlobalHandle
ReleaseSemaphore
LocalUnlock
SetFilePointer
RaiseException
WriteFile
GetCPInfo
GetModuleFileNameA
VirtualAlloc
VirtualFree
ExitProcess
LocalHandle
LocalFree
user32
IsDlgButtonChecked
SendMessageA
GetDlgItem
SetDlgItemInt
EnableWindow
ShowWindow
LoadStringA
wsprintfA
msvcrt
_except_handler3
_adjust_fdiv
malloc
_initterm
free
__CxxFrameHandler
Sections
.text Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ