Static task
static1
Behavioral task
behavioral1
Sample
c0b1739e0fdd5cd9443642718df197f8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0b1739e0fdd5cd9443642718df197f8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c0b1739e0fdd5cd9443642718df197f8_JaffaCakes118
-
Size
104KB
-
MD5
c0b1739e0fdd5cd9443642718df197f8
-
SHA1
063d4cc0f619c0b0d8b8c74b7f477a71a94cf52e
-
SHA256
ac9c5c4fc4dc1a0af62e99f3f266d3b6ac2dc141081a62dee216a84057de5dd7
-
SHA512
c0bec904d76d2ac7787a3b9dbe9cb9483a39c2cc2a7b70106293c25bbc6b8e55a74b0d2bed1e2beea1c362141d63fc537b027f56e1a6762b0a057eea854ab10b
-
SSDEEP
1536:Wr6nobqdZ+x9QVBX6k5NahdKleP96RhcI+3yZ8:Wunob2Z+fQekTXleP9WF+3i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0b1739e0fdd5cd9443642718df197f8_JaffaCakes118
Files
-
c0b1739e0fdd5cd9443642718df197f8_JaffaCakes118.dll windows:4 windows x86 arch:x86
ea3fe449c5d441af46c0c1da3dd9221b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetProfileIntA
lstrcmpA
GlobalSize
GlobalAlloc
GlobalFree
GlobalFlags
GlobalLock
GlobalUnlock
lstrcatA
ReadFile
DeleteFileA
MultiByteToWideChar
IsBadReadPtr
VirtualAlloc
GetACP
UnhandledExceptionFilter
TlsGetValue
TlsSetValue
GetCurrentThreadId
SetEndOfFile
ExitProcess
GetWindowsDirectoryA
CloseHandle
Sleep
GetCommandLineA
UnlockFile
GetFileType
CreateFileA
SetFilePointer
GetModuleHandleA
GetStartupInfoA
GetStdHandle
InterlockedExchange
CreateIoCompletionPort
GetProcessHeap
GetSystemInfo
HeapCreate
HeapDestroy
InterlockedDecrement
InterlockedIncrement
WriteFile
PostQueuedCompletionStatus
SetEvent
SetProcessWorkingSetSize
GetCurrentProcess
ResetEvent
GetTickCount
lstrlenA
WriteConsoleA
GetSystemTimeAsFileTime
LockFile
VirtualProtect
user32
TranslateMessage
DispatchMessageA
PostMessageA
DdeNameService
DdeGetData
GetMessageA
MessageBoxA
wvsprintfA
DdeConnect
PeekMessageA
RegisterWindowMessageA
ShowWindow
ChangeMenuA
GetSystemMenu
CreateWindowExA
DdeFreeStringHandle
DdeGetLastError
DdeUninitialize
DdeCmpStringHandles
DdeClientTransaction
advapi32
ReportEventW
msvcrt
_adjust_fdiv
malloc
_initterm
free
memset
memcpy
_except_handler3
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ