Static task
static1
Behavioral task
behavioral1
Sample
fa3d053d3ab0ba68023624cb77eb500a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa3d053d3ab0ba68023624cb77eb500a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fa3d053d3ab0ba68023624cb77eb500a_JaffaCakes118
-
Size
64KB
-
MD5
fa3d053d3ab0ba68023624cb77eb500a
-
SHA1
74587c72bd934380cf3c3b7e99f66bfa4fdc28ed
-
SHA256
6e9db8af8fc3d980acfa4f9739a2905b3413a4c8c6ed06dbd5ec993425c0cd5d
-
SHA512
1833c16166c709c15e0e1248c42001bf3495022b2075dca59873b24653350c6c60385996888b02438617eb6004e0a117110bc79fab892224892190457bcd746a
-
SSDEEP
768:BP285/Fmo+lzlTgS1obGrAgy1TJtSil2MsV/1i+UElGFM/htSUolNYyfmw:BP2C6jgS1o9F1TJllEVtQMjolNZfm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa3d053d3ab0ba68023624cb77eb500a_JaffaCakes118
Files
-
fa3d053d3ab0ba68023624cb77eb500a_JaffaCakes118.dll windows:4 windows x86 arch:x86
487d889545ff13e254a6ea478fc8d1b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
iphlpapi
GetAdaptersInfo
wininet
InternetOpenUrlW
InternetReadFile
InternetCloseHandle
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
kernel32
TlsGetValue
LCMapStringW
DeleteFileW
Sleep
CreateThread
LCMapStringA
SetEndOfFile
HeapFree
HeapAlloc
MultiByteToWideChar
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
GetLastError
ReadFile
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
SetStdHandle
SetFilePointer
CreateFileW
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
shell32
ShellExecuteW
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ