jkwehuetvbv
Static task
static1
Behavioral task
behavioral1
Sample
06f870cc601806b39128425a0f0b4eb7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06f870cc601806b39128425a0f0b4eb7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
06f870cc601806b39128425a0f0b4eb7_JaffaCakes118
-
Size
156KB
-
MD5
06f870cc601806b39128425a0f0b4eb7
-
SHA1
8dc3bd13e60a30d5947ad2b5f81252b9beb2b80c
-
SHA256
bb237945c340568907718f5b83edca5ce3b48834731ea19d17737542e3759ce9
-
SHA512
914b29071caab15f271c368700bf26fbf864026a0452a32ce1b6c66193c7703a7f29b57af5036c676a6cefaa413666788215d8acc201228d7efaf2ce118f261a
-
SSDEEP
3072:B/Ov8OLHGHCuqRBO+BjtAKTQcmZoukLnjwPg75nJ4y71rq6:hOJG3IrZmpkLnjB5J4er
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06f870cc601806b39128425a0f0b4eb7_JaffaCakes118
Files
-
06f870cc601806b39128425a0f0b4eb7_JaffaCakes118.dll windows:4 windows x86 arch:x86
5436c9562f4d983d3233ec691a3eef09
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyW
RegQueryValueExW
GetSecurityDescriptorControl
RegSetValueExA
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExA
RegOpenKeyExW
RegEnumValueA
ChangeServiceConfigA
LockServiceDatabase
RegCloseKey
RegSetValueExW
RegDeleteKeyW
version
VerQueryValueA
kernel32
RtlUnwind
GetStringTypeW
IsValidLocale
LoadLibraryA
GetHandleInformation
GetModuleHandleA
GetProcAddress
Sleep
FormatMessageA
InitializeCriticalSection
CreateProcessA
ResetEvent
CloseHandle
SetEndOfFile
GetTempFileNameA
lstrlenA
GlobalUnlock
VirtualAlloc
ExitProcess
GetSystemTime
HeapAlloc
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapFree
DeleteCriticalSection
FatalAppExitA
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
CreateFileA
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
ReadFile
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
Exports
Exports
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ