xpUserEnum
Static task
static1
Behavioral task
behavioral1
Sample
de10e293cdd73c92885c681b8519b473_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de10e293cdd73c92885c681b8519b473_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
de10e293cdd73c92885c681b8519b473_JaffaCakes118
-
Size
244KB
-
MD5
de10e293cdd73c92885c681b8519b473
-
SHA1
3fb7467d5b3eec828d86aeda54120a1c81c4045e
-
SHA256
75f248cd030d8f935e4eac4f04cb0d9efb99f7b9b755a05710d07667bfe4e19d
-
SHA512
7ab5ee7a51c48d759d0bff11006e5bd1131806e79fb153e1f6aa7b8eb1fa0a74fb746f4550b6466d6e5f1ecb68d0125fd54086f026aaab2817839fd847ffac23
-
SSDEEP
6144:qCbdxzo8hyfaKjZNBbkOUn32Mq0kGtV56VqYw5Us40JxWj:qCbdxc8VKdQOm3bkGv56oYwKT0JIj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de10e293cdd73c92885c681b8519b473_JaffaCakes118
Files
-
de10e293cdd73c92885c681b8519b473_JaffaCakes118.dll windows:4 windows x86 arch:x86
78dd8064479542272d06f8e9ff7074c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
MapViewOfFile
WaitForSingleObject
ReleaseMutex
CopyFileA
LoadLibraryA
EnterCriticalSection
CreateEventA
OpenEventA
Sleep
InterlockedIncrement
InterlockedDecrement
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
lstrlenW
ExitProcess
LocalFree
lstrlenA
GetTickCount
InterlockedCompareExchange
GetCommandLineA
UnmapViewOfFile
SetLastError
CreateProcessA
LeaveCriticalSection
CreateDirectoryA
ole32
OleSetContainedObject
CoUninitialize
OleCreate
CoCreateGuid
CreateBindCtx
CoInitialize
user32
SendMessageA
TranslateMessage
GetSystemMetrics
PostQuitMessage
CreateWindowExA
GetClassNameA
DispatchMessageA
SetWindowLongA
DefWindowProcA
DestroyWindow
RegisterWindowMessageA
PostMessageA
GetMessageA
SetTimer
KillTimer
GetWindowLongA
GetParent
FindWindowA
oleaut32
SysFreeString
SysAllocStringLen
SysAllocString
advapi32
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
Exports
Exports
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE