Static task
static1
Behavioral task
behavioral1
Sample
fa5a459c28fd813075a5087bd267c410_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa5a459c28fd813075a5087bd267c410_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fa5a459c28fd813075a5087bd267c410_JaffaCakes118
-
Size
216KB
-
MD5
fa5a459c28fd813075a5087bd267c410
-
SHA1
c74c4f0dc125d95412e0714efcfd2e166083b7bd
-
SHA256
81087e3b7b40a14025715f1ca91f3993936698ea4eba784aab9df976d5d1f4ed
-
SHA512
4a65cd0373b5d643f2fe5be618746e2c7174973f1c790d0f9a60a468fb202350159b27392ce5dbd9d3548f2388f81c9a383a75f52e7197861f7fb9207a64ac11
-
SSDEEP
3072:R5ZjZcTDU5y1UNJGh9mWWjsNECCtPqQQ0opq/N+yU7Oga6qLIblrJKS1:R5bmMWnNUPcEoXRZ8ILKS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa5a459c28fd813075a5087bd267c410_JaffaCakes118
Files
-
fa5a459c28fd813075a5087bd267c410_JaffaCakes118.dll windows:4 windows x86 arch:x86
23b75b35832f4950d5477c5e3723fa83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCommandLineA
VirtualProtect
OutputDebugStringA
Sleep
InterlockedExchange
GetCurrentThreadId
GetLocalTime
InterlockedCompareExchange
GetProcAddress
LoadLibraryW
FreeLibrary
GetProcessHeap
lstrlenA
CreateFileW
GetFileInformationByHandle
GetFileType
GetTickCount
SetUnhandledExceptionFilter
ReadFile
SetCommTimeouts
ReleaseMutex
WaitForSingleObject
ResetEvent
WriteFile
ClearCommError
GetSystemDirectoryA
CreateFileA
CloseHandle
GetFileSize
PurgeComm
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetOverlappedResult
GetComputerNameA
CancelIo
CreateEventA
WideCharToMultiByte
GetVersionExA
SetEvent
PeekNamedPipe
WaitForSingleObjectEx
LoadLibraryA
CreateThread
SetNamedPipeHandleState
HeapAlloc
HeapFree
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
VirtualQuery
ExitProcess
GetModuleHandleA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetACP
GetOEMCP
GetCPInfo
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetSystemInfo
Sections
.text Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ