_SS_GDG@4
Static task
static1
Behavioral task
behavioral1
Sample
02f6377930c32b505053ed8b19048401_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02f6377930c32b505053ed8b19048401_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
02f6377930c32b505053ed8b19048401_JaffaCakes118
-
Size
76KB
-
MD5
02f6377930c32b505053ed8b19048401
-
SHA1
c2c1cdc1842930d635b14def02df4b76256b4c71
-
SHA256
5618bc160719567aaf289166e488dc634bbad6fbce0f320b38f8671e166f0d80
-
SHA512
a85e6cf0ab82761f01ede4ff12b77ada5ad133c10f64deacbdbc6bf5334ef6a21b04b153855980506a632fcf7f6049688b3870386dfe44f28c52b61594441927
-
SSDEEP
1536:yPns8Qs4w1KhEgO9tMZMpbMqqJI7Jy2Z47gGuGwzRr:yPs8R4wAopbMqqJI7w7gFR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02f6377930c32b505053ed8b19048401_JaffaCakes118
Files
-
02f6377930c32b505053ed8b19048401_JaffaCakes118.dll windows:4 windows x86 arch:x86
d24828fac170010aad2f3753dd6a104b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetPrivateProfileStringA
Sleep
VirtualAlloc
ExitProcess
WritePrivateProfileStringA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetProcAddress
GetModuleHandleA
OutputDebugStringW
GetCommandLineA
LoadLibraryA
FreeLibraryAndExitThread
SetEvent
OpenEventA
GetModuleFileNameA
CreateThread
VirtualQuery
lstrcmpW
lstrcpyW
lstrcatA
lstrcmpiA
lstrcpyA
GetSystemTime
lstrlenA
VirtualFree
GlobalLock
GlobalUnlock
IsBadReadPtr
GetTickCount
GetWindowsDirectoryA
WideCharToMultiByte
MultiByteToWideChar
GlobalAlloc
GlobalFree
IsBadWritePtr
VirtualProtect
user32
wsprintfA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
ws2_32
closesocket
WSACleanup
setsockopt
connect
recv
gethostbyname
inet_ntoa
inet_addr
htons
socket
WSAStartup
send
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyA
msvcrt
memset
_except_handler3
_initterm
_adjust_fdiv
malloc
free
strstr
atoi
_snprintf
strchr
strncpy
srand
rand
sprintf
_strlwr
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ