Static task
static1
Behavioral task
behavioral1
Sample
c86c7ec1d570a3d1b3295357ece80bc5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c86c7ec1d570a3d1b3295357ece80bc5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c86c7ec1d570a3d1b3295357ece80bc5_JaffaCakes118
-
Size
31KB
-
MD5
c86c7ec1d570a3d1b3295357ece80bc5
-
SHA1
462be66551620643afb031dd920b1fee56226849
-
SHA256
a077eacfdf591e619ea891010487b37a60b1182d6f043731c6ec503f4988e6f4
-
SHA512
2137a2fe877a590240cb586783465894241f46c58b6d983b3f88a6ecc785d3f040e778de43e4a8c25cf7c236aff537b58f274f73befd8dd38367e169a0ea31d1
-
SSDEEP
384:4q6FuhYBAUnoADpuPFV+OYwgvJcacV2lN+jYKewN2P6Ul8Cv3wsd1RIipH87Iip4:4q47uPFV+Odg9cVyKea2P6IjOV8g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c86c7ec1d570a3d1b3295357ece80bc5_JaffaCakes118
Files
-
c86c7ec1d570a3d1b3295357ece80bc5_JaffaCakes118.dll windows:4 windows x86 arch:x86
21ab351db0e26cc6c661005d598dc615
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemDirectoryA
GetTickCount
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
LocalFree
OpenProcess
Process32First
Process32Next
ReadFile
ReleaseMutex
GetProcAddress
TerminateProcess
TerminateThread
WaitForSingleObject
WinExec
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
GetCurrentThreadId
CreateToolhelp32Snapshot
CreateThread
CreateMutexA
CreateFileA
Sleep
CloseHandle
user32
wsprintfA
wsock32
socket
send
closesocket
bind
accept
__WSAFDIsSet
WSAStartup
WSACleanup
select
recv
listen
inet_addr
gethostname
gethostbyname
connect
ole32
CoInitialize
CreateStreamOnHGlobal
shlwapi
StrRChrA
StrDupA
StrToIntA
StrStrIA
StrTrimA
wininet
InternetOpenUrlA
InternetOpenA
DeleteUrlCacheEntryA
FindCloseUrlCache
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
InternetCloseHandle
InternetCrackUrlA
InternetGetConnectedState
advapi32
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
urlmon
URLDownloadToFileA
shell32
ShellExecuteA
msvcrt
strtok
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 702B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ