Static task
static1
Behavioral task
behavioral1
Sample
02a69adb821264842fe8ffb8e68046eb_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02a69adb821264842fe8ffb8e68046eb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
02a69adb821264842fe8ffb8e68046eb_JaffaCakes118
-
Size
91KB
-
MD5
02a69adb821264842fe8ffb8e68046eb
-
SHA1
e6245ef9bc2f0f7db8df737aa41997c798d4029f
-
SHA256
bbc130dcd644dd8a78de10059f13028102c2c82cf88ff2003d77d7af780bf9ca
-
SHA512
42e5935b7a67852ccd6cc688ddd367c78b3dc4c2ef3dc144d26590f0701d901cc688da38a5fdaff371957edba64d44f426cbb19ecbfb5dc26996ea84a090d8af
-
SSDEEP
1536:Nu9y3B1Ft7cWvA+WoN5IICWqZFsDrz8GhwqsKgLBTrU7jRLj6IPMJjtG8VlM/kC1:Wy3B1g57/dZFsXz8d5LprU7jRLj6QMJg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02a69adb821264842fe8ffb8e68046eb_JaffaCakes118
Files
-
02a69adb821264842fe8ffb8e68046eb_JaffaCakes118.dll windows:4 windows x86 arch:x86
098ce2d7d943a0002cac483aa8f8c0c7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpynA
lstrcmpiA
lstrlenW
lstrlenA
LoadResource
FindResourceA
CloseHandle
LoadLibraryExA
MultiByteToWideChar
FreeLibrary
ReleaseMutex
lstrcatA
InterlockedExchange
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrcpyA
WaitForSingleObject
GetModuleFileNameA
SizeofResource
ResetEvent
SetEvent
WaitForMultipleObjects
CreateMutexA
GetCommandLineA
CreateEventA
VirtualProtect
user32
CharNextA
LoadStringA
advapi32
RegOpenKeyExA
RegDeleteValueA
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegDeleteKeyA
RegCloseKey
ole32
CoTaskMemFree
msvcrt
memmove
_adjust_fdiv
_initterm
_except_handler3
malloc
free
_CxxThrowException
strrchr
strncpy
_stricmp
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ