Static task
static1
Behavioral task
behavioral1
Sample
c7b04f2e9dcb8f57e2b3d9967b0f4e55_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c7b04f2e9dcb8f57e2b3d9967b0f4e55_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c7b04f2e9dcb8f57e2b3d9967b0f4e55_JaffaCakes118
-
Size
71KB
-
MD5
c7b04f2e9dcb8f57e2b3d9967b0f4e55
-
SHA1
2ad2b24ecda7ec2dbfedc6095f5cddb8995e0ce3
-
SHA256
9e9ebd462cfb4931e8f1c87e6cb1cae6b84594f75ee9ddde80ae659110b8adbe
-
SHA512
3e0a2e90294bb78796ee4cfabbd9c1dca147b40fbd996f08af8612585cb9c9487e44d3c8b90c4801d7467aa1d6905be82e1b3ea10776d9d744e403a062be87c7
-
SSDEEP
1536:ronqa7VzJkQSQjg9zriwIKFhNsKMfbcKNaOJ7x+cu:Uqok1QjszriwI2hNefbpx+c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7b04f2e9dcb8f57e2b3d9967b0f4e55_JaffaCakes118
Files
-
c7b04f2e9dcb8f57e2b3d9967b0f4e55_JaffaCakes118.dll windows:4 windows x86 arch:x86
11b3796f13e1d6150671decf3ec011dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAlloc
VirtualFree
VirtualProtect
GetCommandLineA
Sleep
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
LocalFree
SetUnhandledExceptionFilter
GetLocaleInfoA
lstrlenW
lstrcpyW
lstrcatW
GetLocalTime
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapDestroy
DisableThreadLibraryCalls
rpcrt4
NdrDllGetClassObject
msvcr71
isspace
__CppXcptFilter
_except_handler3
_amsg_exit
_initterm
_wcmdln
exit
_cexit
_lseek
__pioinfo
memmove
_write
_read
_sopen
_setmode
isdigit
_errno
sprintf
_iob
__dllonexit
_onexit
fflush
_adjust_fdiv
free
_XcptFilter
memcpy
_snprintf
malloc
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ