Static task
static1
Behavioral task
behavioral1
Sample
c87ebbdeae5782280c8e579b01766b42_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c87ebbdeae5782280c8e579b01766b42_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c87ebbdeae5782280c8e579b01766b42_JaffaCakes118
-
Size
17KB
-
MD5
c87ebbdeae5782280c8e579b01766b42
-
SHA1
06931e08317c4e27e0b790d5b176714bca425a63
-
SHA256
46a9fde4893bbeeeedd777a685225e1232a183e12ce15f29f3a51a3fe35bdf60
-
SHA512
2d4ad375a4985a511af3c7a966dc8f0056a303be73fb82252142bb651e425fee2db69d543df6f998915ef2889ebb3fbf14ae2d9ade2bfd30aaec072e8fb6e362
-
SSDEEP
384:3V68ydC2XcgLxqgKLwUs5rBXeQp9CowW77DYT8a:3VuVMcKLwnpPwwnYT8a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c87ebbdeae5782280c8e579b01766b42_JaffaCakes118
Files
-
c87ebbdeae5782280c8e579b01766b42_JaffaCakes118.dll windows:4 windows x86 arch:x86
59cc4f169c1be523c21879c75533a408
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
ReadFile
CreateFileA
DeleteFileA
GetTempPathA
lstrcpynA
CreateThread
WritePrivateProfileStringA
GetPrivateProfileStringA
IsBadReadPtr
GetModuleHandleA
VirtualProtect
GetLastError
CreateMutexA
GetCurrentProcessId
GetSystemTime
GetModuleFileNameA
GetTickCount
lstrcmpiA
lstrlenA
Sleep
lstrcmpA
lstrcpyA
ExitProcess
GetSystemDirectoryA
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
OutputDebugStringA
user32
MapVirtualKeyA
GetKeyboardState
ToAscii
GetWindowTextA
wininet
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
msvcrt
strstr
atoi
memmove
??2@YAPAXI@Z
sprintf
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ