Static task
static1
Behavioral task
behavioral1
Sample
0bff119fe7588dc25b34682f95c1a366_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
0bff119fe7588dc25b34682f95c1a366_JaffaCakes118
-
Size
97KB
-
MD5
0bff119fe7588dc25b34682f95c1a366
-
SHA1
0efd9d7af5da36f183830e675d8e5e025920aa1d
-
SHA256
bce234ff6a492682107ae4b0d22686be51503dd2a935eee00b5392a2499a0ba5
-
SHA512
5fb773fb6bbbf4833315fc439be0e935a12d4c5ab603e6cfb4589b8ad6fa2ec34c90d587a9c5f3cebb21f5260bc1983173a6937bae7ad6a3521fc9950a13a8c6
-
SSDEEP
1536:L6O2y/z/5CgonE6yueCMwk84YPaDEPg97sRM3cxVwzq2yUAfWB/UemiClbRc76Gb:dIgMpyuV14EPg972xVwe2yPfWJW9R8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bff119fe7588dc25b34682f95c1a366_JaffaCakes118
Files
-
0bff119fe7588dc25b34682f95c1a366_JaffaCakes118.dll windows:4 windows x86 arch:x86
2bde6ce955326a0fc448449a2c555155
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
InterlockedExchange
GetProcAddress
GetACP
GetUserDefaultLCID
GetLocalTime
VirtualAlloc
VirtualProtect
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
GetLastError
IsBadReadPtr
GetCurrentThreadId
GetCurrentProcess
IsBadStringPtrA
IsBadCodePtr
GetStartupInfoA
user32
GetCursor
GetWindowContextHelpId
GetWindowTextLengthA
IsCharAlphaNumericA
IsCharAlphaA
GetWindowDC
GetDC
WindowFromDC
GetForegroundWindow
CopyIcon
GetWindow
GetWindowInfo
IsZoomed
IsIconic
GetDesktopWindow
IsMenu
GetClientRect
advapi32
RevertToSelf
IsValidSid
AreAnyAccessesGranted
IsValidAcl
InitializeSecurityDescriptor
msvcrt
_initterm
free
_memicmp
__doserrno
_ultoa
srand
rand
malloc
_adjust_fdiv
__mb_cur_max
modf
_hypot
localeconv
_pctype
_isctype
_ltoa
gdi32
GetBkMode
GdiFlush
GdiGetBatchLimit
GetStretchBltMode
shell32
ord680
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ