Static task
static1
Behavioral task
behavioral1
Sample
deadc05d5859514d0d7577980a20f32a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
deadc05d5859514d0d7577980a20f32a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
deadc05d5859514d0d7577980a20f32a_JaffaCakes118
-
Size
104KB
-
MD5
deadc05d5859514d0d7577980a20f32a
-
SHA1
cd548bc75b9e4ba7c98e8fa62e36d02340f21065
-
SHA256
b05b4e0343154df24ca10835f9ec2a018926c6e81d57cda1e11181c67393265b
-
SHA512
6b1a19bb81a52bab0d77abf4fc2e3ecad2d8b8ed1689ca62537018552104efe184ca99c59a01200d62367784cae5876ad824e4499b76140b081193e5f5d56ebd
-
SSDEEP
3072:vhvhMW4OwMwDjtc5xWF33etNCJo61VCH0:vthM+wMwmxWFwwZ1gU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource deadc05d5859514d0d7577980a20f32a_JaffaCakes118
Files
-
deadc05d5859514d0d7577980a20f32a_JaffaCakes118.dll windows:4 windows x86 arch:x86
52c54bef58b7cc8bfd348f50621dbf79
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
VirtualAlloc
CloseHandle
SetStdHandle
MoveFileExW
GetLastError
WideCharToMultiByte
GetComputerNameW
Sleep
FormatMessageW
LocalFree
lstrcatW
MultiByteToWideChar
lstrcpyW
lstrcmpiW
lstrcpynW
lstrlenW
TlsGetValue
SetLastError
TlsSetValue
GetCurrentThreadId
GetStartupInfoA
VirtualProtect
GlobalFree
GetCommandLineA
GetModuleFileNameW
GlobalAlloc
user32
CharNextW
wsprintfW
LoadStringW
advapi32
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
ole32
ProgIDFromCLSID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
rpcrt4
NdrDllRegisterProxy
msvcr71
_onexit
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
free
__dllonexit
_except_handler3
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ