Static task
static1
Behavioral task
behavioral1
Sample
150090f8441d8813a4f49b56b55c7eb8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
150090f8441d8813a4f49b56b55c7eb8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
150090f8441d8813a4f49b56b55c7eb8_JaffaCakes118
-
Size
74KB
-
MD5
150090f8441d8813a4f49b56b55c7eb8
-
SHA1
27620ae312f7df043d269e27961597d872787abf
-
SHA256
df6a2050af01f26679e83e018b00629bbd97c86fee876acab13077e21f0e1b31
-
SHA512
8d5e3bafdcb9b130ecabe37ae2c8f991480e77676c7100db2533a190dac8ce875d9b6e4841736bf92c20d8c4504d9ab1ab698fc0c9eee5b4ad50e7b5c8805513
-
SSDEEP
1536:uwbUuFZAwIN9j3EjvXGPlokMj7fVLWnw8w1PPqmvxyV:uwRZAwq9jUjvk+kMj7QwGEm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 150090f8441d8813a4f49b56b55c7eb8_JaffaCakes118
Files
-
150090f8441d8813a4f49b56b55c7eb8_JaffaCakes118.dll windows:4 windows x86 arch:x86
05264cb86080e414b6432f4d2f061867
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateConsoleScreenBuffer
DisableThreadLibraryCalls
ExitProcess
FileTimeToLocalFileTime
GetACP
GetCommandLineA
GetCurrentThread
GetModuleHandleA
GetOEMCP
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetVersionExA
GlobalLock
HeapAlloc
HeapCreate
HeapReAlloc
IsDebuggerPresent
MultiByteToWideChar
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateThread
WaitForMultipleObjects
WriteFile
user32
GetUserObjectSecurity
GetClientRect
DrawEdge
advapi32
SetServiceObjectSecurity
LsaEnumerateTrustedDomainsEx
LsaCreateTrustedDomain
AddAccessDeniedAce
ConvertSidToStringSidA
ConvertStringSidToSidW
CryptEnumProvidersA
CryptSetProviderExW
LsaAddPrivilegesToAccount
RegQueryMultipleValuesA
security
SealMessage
olepro32
OleIconToCursor
OleTranslateColor
OleLoadPicture
OleCreateFontIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
oleacc
GetOleaccVersionInfo
AccessibleObjectFromEvent
Sections
.text Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ