HaqFOFAjNsteSzOsHqSQKDWToXA
Static task
static1
Behavioral task
behavioral1
Sample
ce837864c1f5d0b2a85b6a35d04a2522_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ce837864c1f5d0b2a85b6a35d04a2522_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ce837864c1f5d0b2a85b6a35d04a2522_JaffaCakes118
-
Size
16KB
-
MD5
ce837864c1f5d0b2a85b6a35d04a2522
-
SHA1
ecaabb6407571d33812622d3fc22ba211bb759a6
-
SHA256
1babf6d823c052548a9c5d8022d7d332cfc7c5c7ec0b3816772b8c0768c049cd
-
SHA512
b72c1a1cb5b1377a37be4b9b6bc22ce563f7cc732dacfe470c4dee076d86e0959a4eda9545577ca674e576cf6364f737c8c0877673ec8048a5a6faacd9fdc946
-
SSDEEP
192:8MmVWjiU/EqPKr28teWwgpxlrB978RxC57iqzjPzuud9Bay3SQYuq+ijizRFwob:8B0VBC7xlzuC5tXPzdBSd3ZMf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce837864c1f5d0b2a85b6a35d04a2522_JaffaCakes118
Files
-
ce837864c1f5d0b2a85b6a35d04a2522_JaffaCakes118.dll windows:5 windows x86 arch:x86
e72dbd419d4b598e5964afda82266089
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CloseHandle
CreateEventA
InitializeCriticalSection
GetCurrentProcessId
lstrlenA
GetTickCount
Sleep
HeapFree
VirtualAlloc
HeapReAlloc
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
CreateThread
wininet
InternetSetOptionA
InternetOpenA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetQueryOptionA
InternetReadFile
InternetConnectA
InternetCloseHandle
iphlpapi
GetAdaptersInfo
urlmon
ObtainUserAgentString
advapi32
SystemFunction036
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 477B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ