Static task
static1
Behavioral task
behavioral1
Sample
dad4378999742b2af0a3deca1d41edca_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dad4378999742b2af0a3deca1d41edca_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dad4378999742b2af0a3deca1d41edca_JaffaCakes118
-
Size
91KB
-
MD5
dad4378999742b2af0a3deca1d41edca
-
SHA1
da441349d53433a410ace6d011401a167c671d2a
-
SHA256
c5904247c6b34c0b45e9a077cc285758bb5bc9e938841465bcf47e304e7bbc66
-
SHA512
2250f57d9ab80d86332d50b3944df19f553ca663b68aca29b146933172f5689067549fdc035aefb59d06cb65bda4ce741555d47a6979ddb265d86ddfb5e8aa11
-
SSDEEP
1536:/jpMmVwXFWUSo8HJ3c9CCHUYQFCrl6b55vxH3/a1g7qMfjXWq1cQ6MIh:/jp/V1Ja6YQIrIb5PH3q4qMbXcXZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dad4378999742b2af0a3deca1d41edca_JaffaCakes118
Files
-
dad4378999742b2af0a3deca1d41edca_JaffaCakes118.dll windows:4 windows x86 arch:x86
049fd8831de2d8c8e2121ae07196f88a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedDecrement
InterlockedIncrement
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
ReleaseMutex
GetSystemDirectoryW
lstrcatW
lstrcpyW
lstrlenW
GetTickCount
CreateMutexW
Sleep
WriteFile
WideCharToMultiByte
CreateDirectoryW
GetProcessHeap
HeapReAlloc
LocalAlloc
LocalFree
SetUnhandledExceptionFilter
GetLocaleInfoA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
IsBadReadPtr
LoadLibraryExW
FreeResource
GlobalFree
GetCommandLineA
VirtualProtect
ExpandEnvironmentStringsW
GlobalAlloc
user32
wsprintfW
advapi32
RegQueryValueExW
RegEnumValueW
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
ole32
CoCreateInstance
CoTaskMemFree
StringFromCLSID
msvcr71
__dllonexit
_onexit
__CppXcptFilter
malloc
_initterm
_except_handler3
_vsnprintf
sprintf
asctime
localtime
time
memmove
wcscmp
_wstat
wcstok
wcscat
_atoi64
swprintf
wcslen
wcscpy
_wcsicmp
_CxxThrowException
sscanf
wcsncpy
_adjust_fdiv
free
_XcptFilter
memcpy
_amsg_exit
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ