Static task
static1
Behavioral task
behavioral1
Sample
132df6908e4398999e7fb6232266128f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
132df6908e4398999e7fb6232266128f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
132df6908e4398999e7fb6232266128f_JaffaCakes118
-
Size
120KB
-
MD5
132df6908e4398999e7fb6232266128f
-
SHA1
a60ed2786a4c97649319c7f8bf669078594b86bb
-
SHA256
bf20ed572c9bebd6f0e099733dc262e23666f5f414efbcd0000436e38a56cabc
-
SHA512
fa8e38b8e649c9472553c83c164adb57ac75db22aaf3f06c592446cb24b2428a694cb7c340abcba116a58bf547624d3570b4b23efb88fb6eef5a8497014a5ac3
-
SSDEEP
1536:hBetrzmV2fTG+uuazdW8wbMjCLk411DaZg55v+PkJRbA6ojDNju+0MHKzyCO1mXT:m8DRuMpwbhLzDs+5vlnXoQ+Wy71G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 132df6908e4398999e7fb6232266128f_JaffaCakes118
Files
-
132df6908e4398999e7fb6232266128f_JaffaCakes118.dll windows:4 windows x86 arch:x86
488eea61465f89198e617faeaafcf20f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateDirectoryA
EnterCriticalSection
EnumResourceLanguagesA
ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
HeapAlloc
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RemoveDirectoryA
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsGetValue
UnmapViewOfFile
lstrcmpA
lstrlenA
user32
MessageBoxA
MessageBoxIndirectA
EmptyClipboard
DefDlgProcA
advapi32
RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA
ole32
CoUninitialize
OleInitialize
OleUninitialize
WriteFmtUserTypeStg
CoCreateGuid
CoCreateInstance
CoDisconnectObject
CoGetClassObject
CoInitialize
wininet
InternetSetFilePointer
InternetSetOptionExA
InternetWriteFile
InternetQueryDataAvailable
InternetGetLastResponseInfoA
InternetGetCookieA
InternetCrackUrlA
InternetConnectA
InternetCloseHandle
InternetCanonicalizeUrlA
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetReadFile
shell32
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
Shell_NotifyIconA
ShellExecuteW
ShellExecuteExW
ShellExecuteExA
ShellExecuteA
SHGetPathFromIDListA
SHBindToParent
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ