JJRXKUPIFNH
Static task
static1
Behavioral task
behavioral1
Sample
129aa14c6af6dd372529d7ddffdc0802_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
129aa14c6af6dd372529d7ddffdc0802_JaffaCakes118.dll
Resource
win10v2004-20240910-en
General
-
Target
129aa14c6af6dd372529d7ddffdc0802_JaffaCakes118
-
Size
120KB
-
MD5
129aa14c6af6dd372529d7ddffdc0802
-
SHA1
60f27d4515640c954216805c35ac6a54635c3849
-
SHA256
b605351b7eba4b1b056d77f279e23dc02e24cedd21f8ebae74cde686f7daad43
-
SHA512
3d03a93b10399e2cacf8f4a9b3a3e4fa667bf18ce6373dca0db4cf86161de9f11bf515013ceb55f32bdecdbf75d6b9b5f63dbb87210bc673874e46c934b8757f
-
SSDEEP
3072:ViciaU+hcKdmophgxT+q0NArcHgHoUcdeQ:BiUhcfUAggoUeeQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 129aa14c6af6dd372529d7ddffdc0802_JaffaCakes118
Files
-
129aa14c6af6dd372529d7ddffdc0802_JaffaCakes118.dll windows:4 windows x86 arch:x86
866c8af475ccbeda3ee098391de4cfb6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegQueryInfoKeyA
AllocateAndInitializeSid
EqualSid
InitializeSecurityDescriptor
GetTokenInformation
kernel32
GetModuleHandleA
IsValidLocale
GetHandleInformation
GetProcAddress
LoadLibraryA
VirtualAlloc
SetEndOfFile
WriteConsoleA
GetCPInfo
SetEvent
LoadResource
GetVersion
GetConsoleMode
ResumeThread
CreateEventW
lstrcmpiA
SetHandleCount
InterlockedIncrement
MapViewOfFile
FormatMessageA
LockResource
LoadLibraryW
CreateProcessA
SetThreadPriority
ExitProcess
GetSystemTime
HeapAlloc
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapFree
DeleteCriticalSection
FatalAppExitA
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
CloseHandle
CreateFileA
UnhandledExceptionFilter
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
ReadFile
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
Exports
Exports
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ