qlovhjtl
Static task
static1
Behavioral task
behavioral1
Sample
e0f3d7d9876b173a1c1b577ec15116c1_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e0f3d7d9876b173a1c1b577ec15116c1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e0f3d7d9876b173a1c1b577ec15116c1_JaffaCakes118
-
Size
53KB
-
MD5
e0f3d7d9876b173a1c1b577ec15116c1
-
SHA1
af6904994189b6899b80cb032f357505f68884b7
-
SHA256
881e4cc6bffed0aeaf46b15434b5752042593564a49b0f1002382a830a319b6f
-
SHA512
f27280beb75d8bc42b15de8d37572311b119dcb0899f61842d9898c881b6ac8c576cece5156bf8ff01fa689090c4b0e1a03188312e870cbe3ebf5fa499442bb0
-
SSDEEP
768:Yc5zM1SWzlmZW5qKnrNnFnn++OVXNnfIcA54Dbs/eeRn+XEj4sbMO2mx2/MHI6R:NzM1wW2NnfIH5r+XEZM7ms/oI6S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0f3d7d9876b173a1c1b577ec15116c1_JaffaCakes118
Files
-
e0f3d7d9876b173a1c1b577ec15116c1_JaffaCakes118.dll windows:4 windows x86 arch:x86
c60ad5e4d4c26c677fd638c784617a79
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
SHEnumKeyExA
UrlCanonicalizeA
kernel32
GetDriveTypeW
HeapFree
GetProcessHeap
Beep
SetComputerNameExA
ExitProcess
GetComputerNameA
GetBinaryTypeA
CancelIo
CallNamedPipeA
BackupSeek
lstrlenW
lstrlenA
SetCurrentDirectoryA
FlushViewOfFile
HeapAlloc
GetWindowsDirectoryW
GetWindowsDirectoryA
GetCurrentDirectoryA
GetSystemDirectoryA
GetCurrentDirectoryW
lstrcmpW
winmm
DrvGetModuleHandle
GetDriverModuleHandle
mmioOpenA
Exports
Exports
Sections
.code Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 919B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 572B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ