Static task
static1
Behavioral task
behavioral1
Sample
ce8d111e63715812251af6ba91fb876e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce8d111e63715812251af6ba91fb876e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ce8d111e63715812251af6ba91fb876e_JaffaCakes118
-
Size
24KB
-
MD5
ce8d111e63715812251af6ba91fb876e
-
SHA1
53fac826127d87b7f2f84ae2a140b5e30d5a7c03
-
SHA256
4af419b26ef73451d567354fa459b2a527d39a390c4577a0f6d679296b5de804
-
SHA512
db7f1a58ee8c8409f13934480862dc9d707c81ccc0f63c9c07ed7e9177354f25876cb0a02f54de38edae117de1e3764b7af6dfda22f7c7aa4b9dd62b746c82de
-
SSDEEP
192:2naN8uAUeDLRH1h6AU3ojjo/HTwEGA5hb4wapct5UylqZZ:2QCVhlU4jjo/HTKA5hb4wapct5jkZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce8d111e63715812251af6ba91fb876e_JaffaCakes118
Files
-
ce8d111e63715812251af6ba91fb876e_JaffaCakes118.dll windows:4 windows x86 arch:x86
29c69cc6e98c82e0f8c8e00b020b7764
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
GetKeyState
GetKeyboardState
MapVirtualKeyA
VkKeyScanA
ToAscii
msvcrt
free
srand
malloc
_adjust_fdiv
_itoa
atoi
strcmp
memcpy
rand
sprintf
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
fopen
fwrite
fclose
fread
time
memset
_strlwr
_initterm
kernel32
InitializeCriticalSection
LoadLibraryA
ExitProcess
Sleep
GetTickCount
CopyFileA
GetProcAddress
GetModuleFileNameA
GetTempPathA
EnterCriticalSection
lstrlenA
LeaveCriticalSection
OutputDebugStringA
lstrcpyA
ReadProcessMemory
lstrcatA
GetCurrentProcessId
GetCurrentProcess
VirtualProtectEx
WriteProcessMemory
CreateThread
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 740B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ