Start
Static task
static1
Behavioral task
behavioral1
Sample
0532c8f92be10d704d4024c74925da62_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0532c8f92be10d704d4024c74925da62_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0532c8f92be10d704d4024c74925da62_JaffaCakes118
-
Size
11KB
-
MD5
0532c8f92be10d704d4024c74925da62
-
SHA1
bc35d588f9164b488d0ac08438d4ab207baf554c
-
SHA256
d8e0b118a759788fd926604e7c657936d1719a90528675148fc17068081babc2
-
SHA512
3ec57846c16cd5b3238177bb30602a526f27bb4b34354ced2949918e6a59e9e0138472c3f8b645d3501e2a54c194d7fc2a0452effa907db35c6a8e28d3662ab3
-
SSDEEP
192:hIdrwL9k5Yig6eha+ikhxVmtA62IR4aQiEyUf6pYMOXS:hIpR5Yig6ehawxVmtr2Q4aQiEPChOXS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0532c8f92be10d704d4024c74925da62_JaffaCakes118
Files
-
0532c8f92be10d704d4024c74925da62_JaffaCakes118.dll windows:4 windows x86 arch:x86
b7ad56c4e76635fa7c859ff9218a461a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeLibrary
GetProcAddress
Sleep
GetCommandLineA
CreateProcessA
DeleteFileA
GetWindowsDirectoryA
LoadLibraryA
user32
DefWindowProcA
GetWindowLongA
SetTimer
DestroyWindow
UpdateWindow
ShowWindow
GetWindowTextA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
KillTimer
PostQuitMessage
EnumWindows
advapi32
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
winmm
timeGetTime
wininet
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetGetConnectedState
FtpGetFileA
mfc42
ord860
ord540
ord941
ord2915
ord5186
ord800
ord354
ord1979
ord665
msvcrt
strcat
memset
__CxxFrameHandler
rand
srand
strcpy
time
strcmp
sprintf
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
strlen
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ