Static task
static1
Behavioral task
behavioral1
Sample
10758b8ea10042a3eaf1ffdcb74542a8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
10758b8ea10042a3eaf1ffdcb74542a8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
10758b8ea10042a3eaf1ffdcb74542a8_JaffaCakes118
-
Size
26KB
-
MD5
10758b8ea10042a3eaf1ffdcb74542a8
-
SHA1
df0c3058b9756e8e08078a07746606ce1f196cf0
-
SHA256
ba6c5033ae05bf95fd3de4f1b5d1eaea2942f68dc5ff910c8c5924a8d335d9b7
-
SHA512
b71eb93bf40ea588e93215ed1151c73e14f60c4978c2f85fd5998c7817b6a87cd7a67912dac57ab7cb05db2ea8605cc0d359d693dc009e08e8fd2a94c577a171
-
SSDEEP
384:gbLb1gTpLz423Wuj9GVmlEf9ybdn9YYo89pPF7:M1gTpf3Wq9CuPo89th
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10758b8ea10042a3eaf1ffdcb74542a8_JaffaCakes118
Files
-
10758b8ea10042a3eaf1ffdcb74542a8_JaffaCakes118.dll windows:4 windows x86 arch:x86
d76494855f4283e30641398f4c022a2d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateThread
GetModuleFileNameA
DeleteFileA
CopyFileA
CreateProcessA
GetStartupInfoA
Sleep
GetTempFileNameA
GetTempPathA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
RtlUnwind
shlwapi
StrStrIA
urlmon
URLDownloadToFileA
user32
wsprintfA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rebld_i Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE