Static task
static1
Behavioral task
behavioral1
Sample
fb81e7753cb4fb8a43f12fcf364e6da7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb81e7753cb4fb8a43f12fcf364e6da7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fb81e7753cb4fb8a43f12fcf364e6da7_JaffaCakes118
-
Size
96KB
-
MD5
fb81e7753cb4fb8a43f12fcf364e6da7
-
SHA1
3c1c7a27804af5e23cfbd2d9db764708bb8c3dbd
-
SHA256
182b97e5979eba8291df961424325f77bb93fae956cc40e7029d3728c180c6e4
-
SHA512
d9649c04f35e4c2586009e1d9f12008cdd0e1b8d94b7a69178cd63d419d383da617c4f64599d9cd3e9a28f48e5288af398b099c24f76a2900148784e78e5caa4
-
SSDEEP
1536:nBllRiCcfID0I4WpGl/MAvhKQo6Axewf3JNCHBb+uB7Q+wXou:BlHKIiaEKQorFJMHBNqL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb81e7753cb4fb8a43f12fcf364e6da7_JaffaCakes118
Files
-
fb81e7753cb4fb8a43f12fcf364e6da7_JaffaCakes118.dll windows:4 windows x86 arch:x86
98e2336c68d4e1b1ff74da2f0327fc7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetStringTypeA
CreateDirectoryW
SetFileAttributesW
LocalFree
LocalAlloc
GetComputerNameA
GetProcAddress
LoadLibraryA
CloseHandle
GetProcessHeap
GetCurrentThread
LoadLibraryW
GetSystemDirectoryW
GetCurrentProcess
VirtualProtect
GetCommandLineA
LCMapStringW
RtlUnwind
GetVersion
ExitProcess
TerminateProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
wsprintfW
advapi32
SetSecurityDescriptorDacl
InitializeAcl
AllocateAndInitializeSid
GetLengthSid
InitializeSecurityDescriptor
FreeSid
AddAccessAllowedAce
RegCloseKey
EqualSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
GetSidSubAuthority
GetAce
GetAclInformation
GetSecurityDescriptorSacl
GetSecurityDescriptorDacl
MakeSelfRelativeSD
GetSecurityDescriptorControl
GetSecurityDescriptorLength
GetFileSecurityW
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ