_EntryPoint@16
Static task
static1
Behavioral task
behavioral1
Sample
fee3937ccc57d424befcf09cdefa1d62_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fee3937ccc57d424befcf09cdefa1d62_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fee3937ccc57d424befcf09cdefa1d62_JaffaCakes118
-
Size
60KB
-
MD5
fee3937ccc57d424befcf09cdefa1d62
-
SHA1
3b393a2aec3d654e618efe2c494cc33a8ac632c6
-
SHA256
0182398cc30a9cb57eb4232e3be206f1e586d74820086804497685ecf3f849cf
-
SHA512
4428d4c08a2067bb900cb715f73fe7fdac44b73029ac1cd7b1c23d56ea0821a9813bf47508ca125edd3c91ba40e6ce98dcacb7791aa7f2a55ef5edd4122e29b8
-
SSDEEP
768:6iR5TcLKnAaW9kN+/qtGIusNneWhfLXSo2eK2i2wb+eZREjqzW:Lu9X9nZMlXh7SqK2i2wyeZREWC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fee3937ccc57d424befcf09cdefa1d62_JaffaCakes118
Files
-
fee3937ccc57d424befcf09cdefa1d62_JaffaCakes118.dll windows:4 windows x86 arch:x86
0fc775a0d908ddefd3811d37ec774fbb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateThread
FindNextFileA
FreeLibrary
GetProcAddress
LoadLibraryA
FindFirstFileA
CreateFileA
lstrlenA
CreateMutexA
GetVersionExA
FormatMessageA
WinExec
DisableThreadLibraryCalls
Sleep
GetTickCount
WriteFile
CloseHandle
ReleaseMutex
GetLastError
user32
GetMessageA
TranslateMessage
DispatchMessageA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegCloseKey
msvcrt
malloc
strrchr
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
tolower
sprintf
atoi
free
strchr
strncat
strstr
rand
_stricmp
toupper
srand
time
isdigit
_initterm
_adjust_fdiv
_strnicmp
wsock32
closesocket
WSACleanup
__WSAFDIsSet
inet_addr
getsockname
WSAStartup
connect
socket
gethostbyaddr
recv
ioctlsocket
htons
send
listen
bind
setsockopt
accept
gethostbyname
inet_ntoa
select
Exports
Exports
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ