hhpkkwo
Static task
static1
Behavioral task
behavioral1
Sample
deb9e31363db14e7b9d0b988e2342456_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
deb9e31363db14e7b9d0b988e2342456_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
deb9e31363db14e7b9d0b988e2342456_JaffaCakes118
-
Size
50KB
-
MD5
deb9e31363db14e7b9d0b988e2342456
-
SHA1
14ec63ac69c1ca83b170a2977e4b78119fca135d
-
SHA256
9897d7fe12b6deef7076a12655225d1921086d5b495c18e9f2158517004179c9
-
SHA512
9b261e1fcc6c1a2e3bb21029349246fa0fecf49177484d14c4ca26664639e8366360a64484384ead446c010acfd10320fdc0b20c538d94ea85154b799ac193c2
-
SSDEEP
768:RW13QUOvIZff6pYjIWJg0cNzhkxPVGFAs5tcuPykRuR/QBbDwuCvzM3fJfdTh8D:RwZh2GIbPN3Q5kV1ZmzM3n+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource deb9e31363db14e7b9d0b988e2342456_JaffaCakes118
Files
-
deb9e31363db14e7b9d0b988e2342456_JaffaCakes118.dll windows:4 windows x86 arch:x86
6308680de3ec4a64d3dd9ee618699c4e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetInformationJobObject
lstrcmpiA
FindNextChangeNotification
QueueUserAPC
GetLargestConsoleWindowSize
lstrcpynW
FindNextVolumeA
EnumSystemLocalesA
GetFileType
FreeResource
ReadProcessMemory
GetProcessPriorityBoost
GetCurrentProcess
SetEndOfFile
CreateHardLinkA
FreeLibraryAndExitThread
BuildCommDCBAndTimeoutsW
CreateMutexA
GetDiskFreeSpaceExA
DefineDosDeviceA
GetSystemDefaultLCID
SetLastError
GetStartupInfoW
SetComputerNameW
SetLocalTime
SetConsoleCursorInfo
GetFileAttributesExW
GetFileAttributesW
FindResourceW
ExitThread
GetTimeZoneInformation
RequestWakeupLatency
GetCommConfig
FileTimeToLocalFileTime
GetLogicalDrives
GlobalAddAtomA
FindResourceExA
Sleep
GetPrivateProfileStringW
HeapAlloc
GetProcessHeap
HeapFree
SetFilePointer
MulDiv
Beep
user32
OpenIcon
GetMenuItemRect
CallWindowProcA
InvalidateRgn
GetPropA
KillTimer
SetTimer
GetWindowThreadProcessId
CharLowerBuffA
CreateIconIndirect
UnhookWinEvent
SetCursorPos
VkKeyScanExA
GetDlgItemTextW
HideCaret
DragObject
OemToCharBuffA
ToAscii
GetCursorInfo
DlgDirSelectComboBoxExA
EmptyClipboard
GetClassInfoExW
LoadImageW
ChangeDisplaySettingsA
FindWindowA
SetCapture
GetSysColor
CountClipboardFormats
SetPropA
CheckMenuRadioItem
GetListBoxInfo
GetKeyNameTextW
SendMessageTimeoutW
BeginDeferWindowPos
ReleaseDC
DialogBoxIndirectParamW
IsClipboardFormatAvailable
advapi32
RegLoadKeyA
msvcrt
malloc
free
wininet
InternetCloseHandle
Exports
Exports
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ