Static task
static1
Behavioral task
behavioral1
Sample
14ec6393814248a9b56c90adbc24fad3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14ec6393814248a9b56c90adbc24fad3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
14ec6393814248a9b56c90adbc24fad3_JaffaCakes118
-
Size
79KB
-
MD5
14ec6393814248a9b56c90adbc24fad3
-
SHA1
2bb6ec68bf056fe928f010336985b9a96e891083
-
SHA256
74d1ab75492b247245854586797c54dad2576fe668b6cf6b3c81b8c0cdb3ffd2
-
SHA512
094bfaf694077888d51b8bf84e255779c2488164c0cdc67ca420a7fd19a288fb45d5b2d2d6f129a6ef1a70e84404173c043b13c4c05dbec74c8254bd4c442210
-
SSDEEP
1536:RlnY9TCmapMdf0MAcqP6ag4wgiijCxVnCoq4j:RlnY9TCXMT9qyag49iiex55q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14ec6393814248a9b56c90adbc24fad3_JaffaCakes118
Files
-
14ec6393814248a9b56c90adbc24fad3_JaffaCakes118.dll windows:4 windows x86 arch:x86
8c5cf95426e862be31cb032a4e72bdf5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FormatMessageA
GetModuleHandleA
GetProcessHeap
MultiByteToWideChar
CreateEventA
GetConsoleMode
GetFileSize
GetFileType
CreateFileA
GetStdHandle
VirtualAlloc
VirtualProtect
GetSystemInfo
GetOverlappedResult
ReadFile
ResetEvent
CloseHandle
WriteFile
WideCharToMultiByte
WaitForSingleObject
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCPInfo
GetCommandLineA
advapi32
IsTextUnicode
msvcrt
memset
malloc
free
_except_handler3
memcpy
qsort
setlocale
_initterm
_amsg_exit
exit
fprintf
_iob
atoi
_strnicmp
_adjust_fdiv
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ