mfekpugfn
Static task
static1
Behavioral task
behavioral1
Sample
fcbf46246bb3dfa6c8f738ca4dd1ab85_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcbf46246bb3dfa6c8f738ca4dd1ab85_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fcbf46246bb3dfa6c8f738ca4dd1ab85_JaffaCakes118
-
Size
49KB
-
MD5
fcbf46246bb3dfa6c8f738ca4dd1ab85
-
SHA1
083a7dfcf8cd919e551518252e875e19c9ca68a4
-
SHA256
f9cb7760c339049f8c6009fcb5f6aecb77b2eb8166d1c5436061ccfd4d31b20e
-
SHA512
158c45437a14d3e25c9b6eb5e203814304e399aa285177da786602affdf3fbda96728046c28d267c137d4565c975e2b0c488f729eb44d714c3544e5df0bb86d5
-
SSDEEP
768:PNt9Acn+uSt5jPJN962FeDl4XYzSm94qbssO07MXhZd1jsgIxw7BYgzLluo5ecr:Vt9Acn+rhYZ4X4lJpid1ygzLlvrTXxi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcbf46246bb3dfa6c8f738ca4dd1ab85_JaffaCakes118
Files
-
fcbf46246bb3dfa6c8f738ca4dd1ab85_JaffaCakes118.dll windows:4 windows x86 arch:x86
82e3103265e769060ceb738cec7c9588
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlCanonicalizeA
kernel32
lstrcpynW
MulDiv
lstrcmpW
GetFileAttributesW
FindFirstFileW
FindClose
lstrcatW
GetCommandLineW
GetProcAddress
GetCurrentProcessId
lstrcmpiW
CreateFileW
ReadFile
lstrcpyW
CloseHandle
FoldStringW
LocalLock
LocalSize
LocalUnlock
lstrlenW
LocalAlloc
LocalFree
WriteFile
GlobalFree
GetStartupInfoA
LoadLibraryA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
MapViewOfFile
CreateFileMappingW
GetFileInformationByHandle
GlobalUnlock
CompareStringW
GetTimeFormatW
GetDateFormatW
GetUserDefaultLCID
GetLocalTime
QueryPerformanceCounter
GetTickCount
Beep
GetHandleInformation
HeapAlloc
GetProcessHeap
HeapFree
SetLastError
WideCharToMultiByte
LocalReAlloc
FormatMessageW
GetUserDefaultUILanguage
GetLastError
GetLocaleInfoW
GlobalLock
advapi32
RegCloseKey
RegCreateKeyW
IsTextUnicode
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW
RegQueryValueExW
msvcrt
wcsncpy
shell32
DragFinish
ShellAboutW
DragAcceptFiles
DragQueryFileW
winmm
mmioOpenA
winspool.drv
ClosePrinter
GetPrinterDriverW
OpenPrinterW
comctl32
CreateStatusWindowW
comdlg32
PageSetupDlgW
FindTextW
GetSaveFileNameW
CommDlgExtendedError
ReplaceTextW
GetOpenFileNameW
GetFileTitleW
ChooseFontW
PrintDlgExW
Exports
Exports
Sections
.code Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 568B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ