Static task
static1
Behavioral task
behavioral1
Sample
e25485acad9b38077404b19fadc8adac_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
e25485acad9b38077404b19fadc8adac_JaffaCakes118
-
Size
162KB
-
MD5
e25485acad9b38077404b19fadc8adac
-
SHA1
4f0eca62dda1e1dbec3bd9f467eb2da64e439ab5
-
SHA256
1191188ccc2c04618ddb640b1ca369ea44c54af96b7863cd9dbf2cc4a76e7b79
-
SHA512
fd2de8645daf30afeb7dcf6413d0feb20e6f562f64518bf10dd79bf71c9d0d3594e4e0e4b9054274ecd8451c1a7efb3597a494ff9984ce242bdaf7d0321536ba
-
SSDEEP
3072:QVPph6qOxO2dSzVnn1Bnk5Y8R3U0UsByAA3u14BQ3+8ysTwPw4TLsPY2:CPpCVmVn1vEUp5u14BQO8yX44PsPZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e25485acad9b38077404b19fadc8adac_JaffaCakes118
Files
-
e25485acad9b38077404b19fadc8adac_JaffaCakes118.dll windows:4 windows x86 arch:x86
92994d42e6d5ce8c8716312c107e9393
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetStartupInfoA
GetUserDefaultLCID
VirtualAlloc
VirtualProtect
VirtualQuery
GetTickCount
IsBadReadPtr
IsBadStringPtrA
InterlockedIncrement
LoadLibraryA
IsDBCSLeadByte
GetVersionExA
Sleep
SetLastError
GetProcessHeap
QueryPerformanceCounter
QueryPerformanceFrequency
user32
GetCursor
GetMenuContextHelpId
GetWindowTextA
IsCharLowerA
IsCharAlphaNumericA
GetWindowRgn
GetWindowDC
GetDC
WindowFromDC
GetForegroundWindow
CopyIcon
GetDlgItem
GetAncestor
GetTitleBarInfo
GetWindowInfo
GetDesktopWindow
IsIconic
advapi32
IsValidSecurityDescriptor
InitializeSecurityDescriptor
IsValidAcl
AreAnyAccessesGranted
IsValidSid
msvcrt
malloc
_initterm
free
_ultoa
srand
_set_error_mode
_errno
_adjust_fdiv
_CIasin
div
time
frexp
_pctype
_isctype
__mb_cur_max
ldiv
gdi32
GetPixel
GdiFlush
GdiGetBatchLimit
GetROP2
ole32
CoRevertToSelf
shell32
ord66
ord64
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ