B
Static task
static1
Behavioral task
behavioral1
Sample
dbefeb78d96a53ccfe18139bcd087ce1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbefeb78d96a53ccfe18139bcd087ce1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dbefeb78d96a53ccfe18139bcd087ce1_JaffaCakes118
-
Size
249KB
-
MD5
dbefeb78d96a53ccfe18139bcd087ce1
-
SHA1
6dd8bbf45952d59201e130cb00e9034b375ded72
-
SHA256
347b58cc2570826afa069e14e199d22802c4c0b0d161067a5ee92524a1f4ddca
-
SHA512
33fd75dd29527760365b1bc1607658fd5b420e130c69fcbf00279196edd17ad4e310d8d97d63ccc1b1838a6aba468d970a6c7767cd7c4557905fe86be9637b61
-
SSDEEP
6144:P4bk2wwrJ+s81Y6hxRcePyI79MNhR57E+Dlm:P4bJl+X1Y6hxRfPyz97Eqm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbefeb78d96a53ccfe18139bcd087ce1_JaffaCakes118
Files
-
dbefeb78d96a53ccfe18139bcd087ce1_JaffaCakes118.dll windows:4 windows x86 arch:x86
5222117ad3fc7b0478d3d6450fa611e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeThread
GetModuleHandleA
GetStartupInfoA
GetStringTypeA
GetSystemTimeAsFileTime
GetTickCount
HeapSize
LoadLibraryA
LocalAlloc
QueryPerformanceCounter
SearchPathA
SetStdHandle
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect
WriteConsoleA
msvcrt
strncat
atof
atoi
atol
fopen
wscanf
wcscpy
wcschr
swprintf
strncmp
strlen
strcpy
strcmp
sscanf
fwrite
fseek
user32
WindowFromPoint
GetWindowPlacement
GetSubMenu
GetMessageA
comctl32
CreateStatusWindowA
InitCommonControls
oleaut32
VarDecFromI1
VarDateFromI2
OleLoadPictureFile
VarWeekdayName
VarUI4FromDisp
VarUI2FromBool
VarI2FromDisp
VarDecDiv
SysAllocStringByteLen
SysReAllocString
ddraw
DirectDrawCreate
DDInternalUnlock
DirectDrawCreateClipper
Exports
Exports
Sections
.text Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ