Static task
static1
Behavioral task
behavioral1
Sample
d5248ed1870fe3384e7361393204b1b2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5248ed1870fe3384e7361393204b1b2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d5248ed1870fe3384e7361393204b1b2_JaffaCakes118
-
Size
336KB
-
MD5
d5248ed1870fe3384e7361393204b1b2
-
SHA1
2a35728e05cfecdba0639f41cc4bdad699e48f2b
-
SHA256
96dfe10c80abbbac4f9535a5d1cba0a1d26e960ebb607c7f2cd6b9774809e377
-
SHA512
536987529e0e602a8f53e1aaf8857f0ee1b2ae316d63320df21db1ed55413a35665b2b1505dd8d198bff2d3be6812d4a4bbdfeb215847e922b246c87240892a6
-
SSDEEP
6144:IFh/vB0dM3WfPwE/CckX68QsMDjbxDYpYSNJfA7PtyGBk06Hr/:IFh/vB8M34IB5DQsgRD2VJY7PEkk06H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5248ed1870fe3384e7361393204b1b2_JaffaCakes118
Files
-
d5248ed1870fe3384e7361393204b1b2_JaffaCakes118.dll windows:4 windows x86 arch:x86
c866360b55b6dd60e47e72dcabd2c66f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcmpA
GetFileAttributesA
GetProfileIntA
GetSystemTimeAdjustment
GetPrivateProfileStringA
QueryMemoryResourceNotification
SetCalendarInfoA
LZOpenFileA
GetDevicePowerState
GetConsoleAliasesLengthA
ProcessIdToSessionId
LocalUnlock
GetCurrentThreadId
GetVolumePathNamesForVolumeNameA
UnregisterConsoleIME
SetConsoleInputExeNameA
GetCommState
GetFileSizeEx
VirtualAlloc
MultiByteToWideChar
GetSystemWindowsDirectoryA
SetThreadUILanguage
GetLogicalDrives
GetFullPathNameA
WriteProfileStringA
GetConsoleWindow
GlobalHandle
GetCommMask
GetVolumeInformationA
GetConsoleCursorMode
GetQueuedCompletionStatus
SetVolumeLabelA
GetCommModemStatus
lstrcatA
IsWow64Process
SetFileApisToANSI
IsProcessorFeaturePresent
FindFirstFileExA
TransmitCommChar
LocalFlags
Module32First
SetConsoleIcon
LZCopy
GetProcessHeap
GetFileAttributesExA
SetFileValidData
WriteConsoleOutputCharacterA
GetModuleHandleA
LockFile
GetStringTypeA
UpdateResourceA
OpenSemaphoreA
FindResourceExA
SetConsoleTitleA
GetDiskFreeSpaceExA
CreateFileMappingA
FlushConsoleInputBuffer
IsValidLocale
OpenEventA
DeleteTimerQueueTimer
WaitNamedPipeA
GetConsoleCursorInfo
ResetEvent
lstrlenA
GetConsoleCP
GetDefaultCommConfigA
GetUserGeoID
SetFileAttributesA
InterlockedDecrement
SetUserGeoID
WriteConsoleA
EndUpdateResourceA
wininet
FtpSetCurrentDirectoryW
FtpSetCurrentDirectoryW
winmm
timeGetTime
timeBeginPeriod
Sections
.idata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ