Dataimfort
Static task
static1
Behavioral task
behavioral1
Sample
daf2e09d7ebd85fa3af2bda706373f0e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
daf2e09d7ebd85fa3af2bda706373f0e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
daf2e09d7ebd85fa3af2bda706373f0e_JaffaCakes118
-
Size
177KB
-
MD5
daf2e09d7ebd85fa3af2bda706373f0e
-
SHA1
1fac1a0eb982e00ee0937ed30d668f7d90a6be11
-
SHA256
6f822f3ba4b89c9354812994275daf7f5c703b4280f4cd313cbd3bc550185ce9
-
SHA512
67031025a92b776b3b34f5191f1c125a85d8ca14054f20135d277cbc49e71db34caf185cd810f2d72b5f14358e9f3a4a2eea06716b73ae4a664b778b79f75905
-
SSDEEP
3072:iaN+29hqJJm4IUGgn3/6o9FkIg+2Rni7hFNnUiQV5Xqg:iG+22JJm4Ic3yK2npENUiQPq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daf2e09d7ebd85fa3af2bda706373f0e_JaffaCakes118
Files
-
daf2e09d7ebd85fa3af2bda706373f0e_JaffaCakes118.dll windows:5 windows x86 arch:x86
b7ee782e2867222bd6fbc1a38e75b522
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteCriticalSection
VirtualFree
VirtualAlloc
Sleep
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
SetEvent
InterlockedExchange
CancelIo
CloseHandle
GetLastError
ResetEvent
CreateDirectoryA
GetFileAttributesA
lstrcpyA
lstrlenA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
FindNextFileA
LocalReAlloc
FindFirstFileA
LocalAlloc
DeleteFileA
GetFileSize
SetFilePointer
MoveFileA
ReadFile
lstrcatA
CreateProcessA
CreateThread
TerminateThread
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
HeapFree
HeapAlloc
GetProcessHeap
GetLocalTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetTickCount
GetModuleHandleA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
WaitForMultipleObjects
GetStartupInfoA
LocalSize
OpenProcess
TerminateProcess
GetCurrentThreadId
GlobalMemoryStatus
GetSystemInfo
GetComputerNameA
GetVersionExA
GetCurrentProcess
SetFileAttributesA
CopyFileA
ExpandEnvironmentStringsA
GetModuleFileNameA
CreateFileA
OpenEventA
SetErrorMode
RaiseException
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
WideCharToMultiByte
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
HeapDestroy
HeapReAlloc
ExitProcess
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
Exports
Exports
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ