Static task
static1
Behavioral task
behavioral1
Sample
d65c05217710f3a43751520e6bf68d95_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d65c05217710f3a43751520e6bf68d95_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d65c05217710f3a43751520e6bf68d95_JaffaCakes118
-
Size
62KB
-
MD5
d65c05217710f3a43751520e6bf68d95
-
SHA1
43ff0e39ff7bff5a0749f8c9c73c8496ef86a551
-
SHA256
e2607fb212d41adb75e2991cacc232e7ac393faeeb74e72353618046a301446b
-
SHA512
88633436a67047f2089f007bad9047864c1b626c2b9c55974b237383c6e873ad78d27ee617480544dbae66c86fc7bcaf287cf99e685cad4b284a54e86f8a569c
-
SSDEEP
768:sqcsJzCHstbxfniNvmYAVFiqrNN58uliZ+0cGoGbmx1GLlKMPoJKMlkjCW/xOHZQ:s0JRni5mtagJhcYGo4hfP4ejlw/+t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d65c05217710f3a43751520e6bf68d95_JaffaCakes118
Files
-
d65c05217710f3a43751520e6bf68d95_JaffaCakes118.dll windows:4 windows x86 arch:x86
ceca7d0a6cccd2ca29f493a594f72165
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCommandLineA
GetTickCount
VirtualProtect
GetVersion
ReadFile
CreateMailslotW
CloseHandle
WriteFile
CreateFileW
GetComputerNameW
WriteConsoleW
ExitProcess
HeapFree
HeapAlloc
GetProcessHeap
SetLastError
CompareStringW
lstrlenW
GetStdHandle
FormatMessageW
LocalFree
GetConsoleOutputCP
WideCharToMultiByte
GetThreadLocale
GetLastError
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
TerminateProcess
msvcrt
__CxxFrameHandler
_except_handler3
memset
_iob
_memicmp
_errno
fflush
fprintf
wcstoul
wcstol
wcstok
_initterm
free
malloc
_adjust_fdiv
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ