fivj3vj.jef
Static task
static1
Behavioral task
behavioral1
Sample
d67403e95e6b9e34d8c226bca2bc8842_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d67403e95e6b9e34d8c226bca2bc8842_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d67403e95e6b9e34d8c226bca2bc8842_JaffaCakes118
-
Size
88KB
-
MD5
d67403e95e6b9e34d8c226bca2bc8842
-
SHA1
cf379f01f96b577c1a16c62a29e30a554d3aaf31
-
SHA256
2d1237bc318bdabaf727fb4a562aa17c148005c9cc8b573b8f90fa0b75c10ccb
-
SHA512
11a9ca06273588058b0f17388ea2680d7ad838e3bca9870a8d19dea6a1e7804f031d976c9ea4590459092971d44f7c40c5ca9fa734fd5b027ef7987a5a7bfcc7
-
SSDEEP
1536:4nAHP15TJyDNtqQJs9rI7XxS5o8HelX8IwTP5FPhg1nm6SNbWfLFOAk7j:4nQ5tUNtRJs9c7hKTHe8Ia7ham6mbWTs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d67403e95e6b9e34d8c226bca2bc8842_JaffaCakes118
Files
-
d67403e95e6b9e34d8c226bca2bc8842_JaffaCakes118.dll windows:4 windows x86 arch:x86
e353c287fba550c44df53924fbac7e8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InitializeCriticalSectionAndSpinCount
GetStringTypeW
UnmapViewOfFile
CreateFileA
GetSystemTimeAsFileTime
WriteFile
MapViewOfFile
SetFileTime
SetEvent
InterlockedDecrement
DeleteFileW
InterlockedExchange
TerminateProcess
CreateEventA
lstrlenW
HeapCreate
ReleaseMutex
DeleteFileA
VirtualAlloc
HeapDestroy
GetSystemInfo
GetStringTypeA
CreateFileW
GetEnvironmentStringsW
GetFileType
lstrcmpA
VirtualProtect
GetCurrentProcessId
lstrlenA
GetFileSize
SetFilePointer
DisableThreadLibraryCalls
InterlockedIncrement
TlsGetValue
GetCurrentProcess
OpenFileMappingW
GetEnvironmentVariableA
DeleteCriticalSection
GetFullPathNameA
TlsAlloc
lstrcmpiA
LocalAlloc
WaitForSingleObject
OpenFileMappingA
VirtualFree
GetVersionExA
CreateThread
SetEndOfFile
LeaveCriticalSection
MoveFileW
MoveFileA
GetDiskFreeSpaceW
CloseHandle
Sleep
HeapFree
GetLastError
GetLocaleInfoA
QueryPerformanceCounter
FreeEnvironmentStringsA
CreateMutexW
FreeLibrary
GetCurrentThreadId
GetTickCount
SetHandleCount
FreeEnvironmentStringsW
TlsFree
VirtualQuery
GetEnvironmentStrings
LocalFree
GetFullPathNameW
GetStringTypeExA
LCMapStringA
CompareFileTime
EnterCriticalSection
GetDiskFreeSpaceA
CreateMutexA
FlushViewOfFile
HeapReAlloc
WideCharToMultiByte
GetCPInfo
LCMapStringW
InitializeCriticalSection
Exports
Exports
tlkii
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 546B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ