Static task
static1
Behavioral task
behavioral1
Sample
f4e06aa9ac6eca0362a90fbb268c00b9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4e06aa9ac6eca0362a90fbb268c00b9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f4e06aa9ac6eca0362a90fbb268c00b9_JaffaCakes118
-
Size
60KB
-
MD5
f4e06aa9ac6eca0362a90fbb268c00b9
-
SHA1
0d985e01f404a76ba314623030b3ec7a3331c0d0
-
SHA256
bc276b0a75f05630e24de029b36c9e2286c6349d1c2898c034f71f1190d35680
-
SHA512
245e335cbc50b6f126f848fcf0278c52dc8535aece084bff51736051a9a91bcf1abd136ad77f5ad104ff26d65f4d41546efc428711c25f0ad262183a54905d6e
-
SSDEEP
1536:DgFOPTq/+LeLylOtJIUyv/a/tUptXWi6E1KdyqQ7xH8PAo:G1HIUexUAKdyBxH8Ao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4e06aa9ac6eca0362a90fbb268c00b9_JaffaCakes118
Files
-
f4e06aa9ac6eca0362a90fbb268c00b9_JaffaCakes118.dll windows:4 windows x86 arch:x86
2fa0189126f602d814cc7d243b7fe888
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenW
lstrcmpiW
lstrcatW
FreeLibrary
LoadLibraryW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedIncrement
lstrcpyW
GetSystemDirectoryW
DeviceIoControl
CloseHandle
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
InterlockedExchange
InterlockedExchangeAdd
GetVersion
GetCommandLineA
GetTickCount
InterlockedDecrement
VirtualProtect
user32
LoadStringW
UnregisterClassA
wsprintfW
advapi32
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
rpcrt4
UuidToStringW
NdrClientCall2
RpcStringFreeW
msvcrt
_except_handler3
_adjust_fdiv
memset
_wcsupr
memcpy
wcsncmp
_initterm
_errno
wcschr
_itow
malloc
__CxxFrameHandler
free
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ