Static task
static1
Behavioral task
behavioral1
Sample
f565677db5c45c522a4db32340f8ed74_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f565677db5c45c522a4db32340f8ed74_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f565677db5c45c522a4db32340f8ed74_JaffaCakes118
-
Size
74KB
-
MD5
f565677db5c45c522a4db32340f8ed74
-
SHA1
65fb8292f37991dba7c46e7ebfa60e95f1c322da
-
SHA256
fcb7e0cd59a55f718736773c2219dfe4e1c42b6f5bf1b02d188226d8047d86c0
-
SHA512
4effba98fa3202b375551287b710adb8855c77e89792e365ad59219cb55c51eca65480ce9b970b3f9ef86cdbe442cf23d4c5ce742a9e16cb30cd7f4acd000ce7
-
SSDEEP
1536:TpVWHyEdZopy+j5/5oeLPO+rklq5Vok9:CSEnoj/5PWs4Wok9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f565677db5c45c522a4db32340f8ed74_JaffaCakes118
Files
-
f565677db5c45c522a4db32340f8ed74_JaffaCakes118.dll windows:4 windows x86 arch:x86
1a0cb70fdc45caf231aec53755b6639b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
GetCommandLineA
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetCurrentProcessId
WaitForSingleObject
Sleep
ResetEvent
SetEvent
CloseHandle
CreateThread
CreateEventW
GetOverlappedResult
WaitForSingleObjectEx
SetThreadPriority
HeapDestroy
GetProcessHeap
HeapCreate
DisableThreadLibraryCalls
InterlockedExchange
InterlockedCompareExchange
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
HeapReAlloc
VirtualAlloc
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
user32
UnregisterDeviceNotification
DestroyWindow
RegisterDeviceNotificationW
GetWindowLongW
rpcrt4
RpcBindingFree
RpcBindingSetAuthInfoW
RpcStringFreeW
RpcBindingFromStringBindingW
RpcStringBindingComposeW
NdrClientCall2
RpcBindingSetOption
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ