_LibMain@12
Static task
static1
Behavioral task
behavioral1
Sample
ef34c09155bc8d677aebc615bb521c70_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef34c09155bc8d677aebc615bb521c70_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ef34c09155bc8d677aebc615bb521c70_JaffaCakes118
-
Size
13KB
-
MD5
ef34c09155bc8d677aebc615bb521c70
-
SHA1
9ebe364d43d0c342af8fe648365ade2b49405271
-
SHA256
5744fa9ffe325174629c22aa030f59a622fc1d98aec6e250f2ed836857dc96eb
-
SHA512
e120c1595c6294757cb34617b1e59759fa0138ba8e5a10e5efa4819e928d039a73fa409c1642d6c4eb75479f1c3f89e5258c128d1555bcc8becdfcc290e14f3b
-
SSDEEP
192:WbEWrTR0j7BiqQs4GzcZb7XoznubwpNXCR/QfQLQ24F7BAyJ+XTwGlhL:CciqQlZvanIwKQfQLQ24F7BAyJ+DRlh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef34c09155bc8d677aebc615bb521c70_JaffaCakes118
Files
-
ef34c09155bc8d677aebc615bb521c70_JaffaCakes118.dll windows:1 windows x86 arch:x86
25c098b34455b72f04fc2990d4323ebc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
htons
ioctlsocket
inet_addr
listen
recv
select
accept
send
shutdown
socket
gethostbyname
bind
gethostname
closesocket
WSAGetLastError
WSAStartup
__WSAFDIsSet
connect
getsockname
htonl
wininet
InternetOpenA
shell32
ShellExecuteA
urlmon
URLDownloadToCacheFileA
kernel32
ExitProcess
ExitThread
GetComputerNameA
GetEnvironmentStringsA
GetLastError
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetProcAddress
GetTickCount
GetVersionExA
LoadLibraryA
CreateFileA
RtlUnwind
CreateMutexA
Sleep
VirtualQuery
WriteFile
lstrlenA
CreateThread
DeleteFileA
user32
GetDesktopWindow
wsprintfA
advapi32
GetUserNameA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
crtdll
_fdopen
_open_osfhandle
fclose
_cexit
malloc
memcpy
memset
printf
raise
setbuf
strcat
strcpy
strncpy
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 20B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 848B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 492B - Virtual size: 492B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
.edata Size: 76B - Virtual size: 76B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ