Static task
static1
Behavioral task
behavioral1
Sample
eff19a352e6a38f50abc28cb8317ae62_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
eff19a352e6a38f50abc28cb8317ae62_JaffaCakes118
-
Size
164KB
-
MD5
eff19a352e6a38f50abc28cb8317ae62
-
SHA1
b7d3d9cbd54f7122b71e911abc01eea2020be1eb
-
SHA256
2f57b51f0b98acd50aec2c80ad16c965b2219572b4a8028eb2c69320b2351d65
-
SHA512
294d585c4b09d4b798c949d146b79c62056aeb241fbb0283388ca1f105916330d810de14243a1cf95adb11ebfd38967980fae82e2d74df2637715ab54feb8cf1
-
SSDEEP
3072:aQ5usDNQEZzBa2Nyo2T3YvEZqvwfIlYZkrLTKnb4QPsf0Ojf+qj9tX/K:ptTz6jocZgTBLqPkfj3j9tX/K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eff19a352e6a38f50abc28cb8317ae62_JaffaCakes118
Files
-
eff19a352e6a38f50abc28cb8317ae62_JaffaCakes118.dll windows:4 windows x86 arch:x86
ffbc1b2b0a80d2ad50288a3708fd4400
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersionExA
LoadLibraryA
InterlockedExchange
GetProcAddress
GetVersion
GetStartupInfoA
GetUserDefaultLCID
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
VirtualQuery
IsBadReadPtr
Sleep
QueryPerformanceFrequency
GetComputerNameA
IsBadWritePtr
GetProcessHeap
user32
GetMenuContextHelpId
GetWindowTextLengthA
IsCharLowerA
IsCharAlphaNumericA
GetWindowDC
IsClipboardFormatAvailable
GetDC
GetForegroundWindow
CopyIcon
GetAncestor
GetWindow
GetWindowInfo
GetGUIThreadInfo
GetParent
GetDesktopWindow
IsChild
IsMenu
SetLastErrorEx
BlockInput
InSendMessage
IsWindowUnicode
advapi32
IsValidSid
msvcrt
_adjust_fdiv
malloc
_initterm
free
_memicmp
_swab
srand
_set_error_mode
rand
_itoa
_CIasin
_CIpow
_isctype
__doserrno
__mb_cur_max
time
localeconv
frexp
modf
floor
ldexp
_pctype
_errno
gdi32
GetBkColor
GetBkMode
GetBitmapDimensionEx
ole32
CoDosDateTimeToFileTime
CoGetCurrentProcess
shell32
ord66
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ