InstallHook
Static task
static1
Behavioral task
behavioral1
Sample
fd0e3ae528617921bcbe51a9f5213596_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd0e3ae528617921bcbe51a9f5213596_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fd0e3ae528617921bcbe51a9f5213596_JaffaCakes118
-
Size
14KB
-
MD5
fd0e3ae528617921bcbe51a9f5213596
-
SHA1
42ca1d81e29a5c5d3d315ae1b6b3f04e7fdfb1e5
-
SHA256
719ed154668fc667c39ca8639b45cec6c32b91e6dcf500825f6cb97b008975da
-
SHA512
93bcf718a29ccd55ac1c14ea8306970450803455a50075236fc83c8891e9fc56087ab6fb8151684077d1bd9d929ccca3977c31952dc2bca2ca3e721f1ab67862
-
SSDEEP
384:HOQ7Nx+KZHtKrb1qDmLeX02vCRwROXBOXkLWuv:HOYmUEhQva2IXYXov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd0e3ae528617921bcbe51a9f5213596_JaffaCakes118
Files
-
fd0e3ae528617921bcbe51a9f5213596_JaffaCakes118.dll windows:4 windows x86 arch:x86
13520dda3a2ab906b229bbcd113490db
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
LoadLibraryExA
MoveFileA
Process32First
Process32Next
GetPrivateProfileStringA
SetFileAttributesA
SetFilePointer
Sleep
GetSystemDirectoryA
WriteFile
WritePrivateProfileStringA
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
GetLastError
FreeLibrary
DeviceIoControl
DeleteFileA
CreateToolhelp32Snapshot
CreateThread
CreateFileA
VirtualProtect
GetProcAddress
CopyFileA
RtlZeroMemory
CloseHandle
user32
FindWindowA
GetMessageA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
wsprintfA
shlwapi
PathFileExistsA
StrStrA
comdlg32
GetFileTitleA
advapi32
CreateServiceA
CloseServiceHandle
DeleteService
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
StartServiceA
ControlService
ntdll
NtQuerySystemInformation
_strlwr
wsock32
send
recv
Exports
Exports
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ