rces
Static task
static1
Behavioral task
behavioral1
Sample
fe5434a61b01f13ba6a11c86807fde47_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe5434a61b01f13ba6a11c86807fde47_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fe5434a61b01f13ba6a11c86807fde47_JaffaCakes118
-
Size
46KB
-
MD5
fe5434a61b01f13ba6a11c86807fde47
-
SHA1
a2753e561d4296143bbcf2f4fabf1c53f9a09a9d
-
SHA256
d48a33ad29e26eb0d9391b873f0e61a9e780f5fce14b223e2dc0ecaea697c963
-
SHA512
234351063f5028b2608db73324616781204232d2f6c8e3c994058f16a6d85c907553fed85820f363be532ec0c607c40cd7229fe0712cac5f8702f58026a7869b
-
SSDEEP
768:LbUHekEyYEgr7wylI2n9vVhEydNwdRA8WOIfxCxeBYdZnaVdynFnednM:nU1EtrvI29bEM8W38xiaxykndcn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe5434a61b01f13ba6a11c86807fde47_JaffaCakes118
Files
-
fe5434a61b01f13ba6a11c86807fde47_JaffaCakes118.dll windows:4 windows x86 arch:x86
e8ce47cf29a36de1ae301cba3fe65b7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
SHEnumKeyExA
UrlCanonicalizeA
kernel32
Beep
GetFileAttributesA
ReplaceFileA
CreateHardLinkA
ExitProcess
GetComputerNameA
GetBinaryTypeA
CancelIo
CallNamedPipeA
BackupSeek
BackupRead
lstrcmpA
lstrlenW
lstrlenA
SetCurrentDirectoryA
GetDriveTypeW
GetWindowsDirectoryW
GetWindowsDirectoryA
GetCurrentDirectoryA
GetSystemDirectoryW
GetComputerNameW
GetFileAttributesW
lstrcmpW
HeapAlloc
GetProcessHeap
HeapFree
GetDriveTypeA
advapi32
GetUserNameA
GetUserNameW
winmm
DrvGetModuleHandle
GetDriverModuleHandle
auxGetVolume
Exports
Exports
Sections
.code Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 614B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ