Static task
static1
Behavioral task
behavioral1
Sample
f075a701981dbfceb7bf821720eb0595_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f075a701981dbfceb7bf821720eb0595_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f075a701981dbfceb7bf821720eb0595_JaffaCakes118
-
Size
112KB
-
MD5
f075a701981dbfceb7bf821720eb0595
-
SHA1
2bfaf400e0ea98f0d8379307733950eb8a640568
-
SHA256
2a83dc031c4689709ad61345703fcf3a4f91e7f0c38122536c05a18a5ef55738
-
SHA512
8520c9b18949754b0bed7de63c62d064d35e03d760a785513a47e7d6e4492e06e47c448840f0a9df51e62cc3d2d21d4fc058251733873360fdf7b95fe5b830a2
-
SSDEEP
3072:APb1IVLs05WNzmn+OFxEjHVD5KXBGfK/O8uhxX2qCgArD3nx:UI20okfMD5rfKMbJwD3x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f075a701981dbfceb7bf821720eb0595_JaffaCakes118
Files
-
f075a701981dbfceb7bf821720eb0595_JaffaCakes118.dll windows:4 windows x86 arch:x86
06b269f5c00cabf4986f73faefb8d4cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RaiseException
GlobalFree
ReleaseMutex
WaitForSingleObject
FreeLibrary
GetModuleHandleW
WideCharToMultiByte
lstrlenA
GetVersionExW
InterlockedDecrement
CreateEventW
ChangeTimerQueueTimer
SetCurrentDirectoryW
GetWindowsDirectoryW
CreateDirectoryW
GetComputerNameW
GetCurrentDirectoryW
MoveFileExW
UnregisterWait
LoadLibraryW
GetSystemInfo
DisableThreadLibraryCalls
GetProcAddress
OpenFileMappingW
MapViewOfFileEx
CreateFileMappingW
VirtualAlloc
UnmapViewOfFile
GetModuleFileNameA
GetProfileStringA
CreateFileA
InterlockedIncrement
VirtualProtect
IsDebuggerPresent
GetCommandLineA
user32
CheckDlgButton
IsDlgButtonChecked
ShowWindow
MessageBoxW
SendMessageW
GetParent
PostMessageW
SetWindowLongW
BringWindowToTop
SetForegroundWindow
GetDlgItem
GetWindowLongW
SetCursor
LoadCursorW
SetWindowTextW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
msvcrt
_initterm
_adjust_fdiv
_strcmpi
memcpy
tolower
strchr
_strnicmp
strrchr
__dllonexit
_lock
_onexit
_stricmp
isspace
memset
wcschr
malloc
_except_handler3
_wcsicmp
_amsg_exit
_XcptFilter
free
_callnewh
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ