KbdLayerDescriptor
Static task
static1
Behavioral task
behavioral1
Sample
ce7ec74f86cce6107b6c2c3281b5e37d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce7ec74f86cce6107b6c2c3281b5e37d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ce7ec74f86cce6107b6c2c3281b5e37d_JaffaCakes118
-
Size
6.6MB
-
MD5
ce7ec74f86cce6107b6c2c3281b5e37d
-
SHA1
32a205b311f88b58dc4855238668711f0e52c060
-
SHA256
cd144d9a0ad879768ab57abc313c80d7a022f867866faaa8e662e7ae869e36fc
-
SHA512
c4f761b3e40ec3f67cd954df113f54929fc82e777d081c635941cd3c8bb9f17a1fba1e7d297650cdbe259d1ca549cea19ab1cb75b664a7d04a7ed6efc5b0a92a
-
SSDEEP
196608:OfXDfp8h1qodL2Cc3AAjjlHH9jValZIf4L92L:MB8hBnqAA5valSd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce7ec74f86cce6107b6c2c3281b5e37d_JaffaCakes118
Files
-
ce7ec74f86cce6107b6c2c3281b5e37d_JaffaCakes118.dll windows:5 windows x86 arch:x86
4fcd681b7bdbba68f187da1a42444e40
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateThread
Sleep
SetCurrentDirectoryA
SetEnvironmentVariableW
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleW
GetACP
LoadLibraryW
ExpandEnvironmentStringsW
GetLastError
FreeLibrary
VirtualFree
SetErrorMode
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LocalAlloc
GetProcessHeap
SetEndOfFile
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetStdHandle
InitializeCriticalSectionAndSpinCount
HeapFree
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCommandLineA
GetCPInfo
LCMapStringA
LCMapStringW
HeapAlloc
ExitProcess
HeapCreate
HeapDestroy
VirtualAlloc
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
HeapSize
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
FlushFileBuffers
LoadLibraryA
shell32
SHGetFolderPathW
ws2_32
__WSAFDIsSet
send
shutdown
getaddrinfo
select
freeaddrinfo
connect
closesocket
setsockopt
WSAStartup
recv
socket
Exports
Exports
Sections
.text Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ