Static task
static1
Behavioral task
behavioral1
Sample
0ddbdf12ef1e48fb876fc488e0f29a58_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ddbdf12ef1e48fb876fc488e0f29a58_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0ddbdf12ef1e48fb876fc488e0f29a58_JaffaCakes118
-
Size
603KB
-
MD5
0ddbdf12ef1e48fb876fc488e0f29a58
-
SHA1
de96754d325d8bb393b1a51130bc40350d6b20a2
-
SHA256
636bfaf036d1afaf0cf07e642ac1dda4e15c16408458d83481ddc62af88466fa
-
SHA512
040f7f0d87ee2a252d3bf43dd98a9f07a0496558272b50d9543497aa54694a4f29b56c749f3a6c59475eab1948b4b98e8a20053775634b2277fc0cd31b02618e
-
SSDEEP
1536:X8+HrsKeepiXrFT5BNhd4X+fU/KGrSDnYhqtvp0Kck0:M9MpYFTHNQnXSrsqLmk0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ddbdf12ef1e48fb876fc488e0f29a58_JaffaCakes118
Files
-
0ddbdf12ef1e48fb876fc488e0f29a58_JaffaCakes118.dll windows:4 windows x86 arch:x86
03e837dd38aac0f6d6ac2e16709d5afd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetEnvironmentStrings
DeleteFileA
GetPrivateProfileStringA
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThreadId
CreateFileA
GetEnvironmentVariableA
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetLogicalDrives
GetModuleFileNameA
ExitProcess
CloseHandle
GetProcAddress
GetStartupInfoA
GetStdHandle
GetVersion
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
GetModuleHandleA
user32
OemToCharA
MessageBoxA
GetFocus
EnumThreadWindows
Sections
.Upack Size: 381KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 221KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE