GetEncryptionForAdapter
Static task
static1
Behavioral task
behavioral1
Sample
d52e3d6542853077dca0172478d2477e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d52e3d6542853077dca0172478d2477e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d52e3d6542853077dca0172478d2477e_JaffaCakes118
-
Size
39KB
-
MD5
d52e3d6542853077dca0172478d2477e
-
SHA1
d47f12d5f9dd4162376537ee4c4bf2a278567688
-
SHA256
42c6159c7cae0b1b26b4741eba4559f0be076d911e91bd0fd0593b36d9b8eb79
-
SHA512
c1b89544eea6d23200d92919540bbbeff2959aaeec583aa4e23ab2eb5d119292fb912d6416893fb62e4d077edc96570c8db3e8edf2bbccf51de0443c35779a21
-
SSDEEP
768:I++EXBIan6Fr79C2jBbq66PkzCrnimyhHk2iSmQLivPljFxnRO8sW0OaFRuC:wqIa6Fr79COBmRkzCemyHkbSLgP5hsWC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d52e3d6542853077dca0172478d2477e_JaffaCakes118
Files
-
d52e3d6542853077dca0172478d2477e_JaffaCakes118.dll windows:4 windows x86 arch:x86
ce5417b68fa10a4bf803b90a9b8e81ba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
CreateFileMappingA
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FindResourceA
GetACP
GetCommandLineA
GetConsoleOutputCP
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetTimeZoneInformation
GlobalMemoryStatus
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
ReadFile
RtlUnwind
SearchPathA
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
UnmapViewOfFile
lstrcatA
lstrcpyA
lstrlenA
msvcrt
__getmainargs
__p__commode
__set_app_type
_stricmp
exit
realloc
wcscat
wcslen
user32
wsprintfA
ReleaseCapture
SetClipboardData
SetFocus
TranslateMessage
winmm
mixerGetID
mmioAdvance
mmioDescend
mmioOpenA
mmioSendMessage
mmioSetInfo
timeBeginPeriod
waveOutGetNumDevs
Exports
Exports
Sections
.text Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ