ynojyfo
Static task
static1
Behavioral task
behavioral1
Sample
16986f3d254e32b76d458677219d884f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16986f3d254e32b76d458677219d884f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
16986f3d254e32b76d458677219d884f_JaffaCakes118
-
Size
368KB
-
MD5
16986f3d254e32b76d458677219d884f
-
SHA1
0f0434584a5ce57925eaddfbd96e2e9f886942d8
-
SHA256
710ec691f49f6c7e709179be2becbf3ee03a4d272eaa38a60266b3a5cb37c069
-
SHA512
41ae3d481ec1b049242880ff2e5a8b89d27156d2d19e23a170ff2a7c7727f375d9edf55b7956b577669c0cd626423dfff5d368d3f9e0544c707cd9fada519ced
-
SSDEEP
6144:Cedp72gZbmWYhAO+gsCo9QxRqNNuOMwH0mmxbvHZByCwki4Y:Cez2YbmNhyHQqNNuOMW0nbv5BMk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16986f3d254e32b76d458677219d884f_JaffaCakes118
Files
-
16986f3d254e32b76d458677219d884f_JaffaCakes118.dll windows:4 windows x86 arch:x86
a9a7413f0b7548d638a20489d4657698
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlCanonicalizeA
kernel32
Beep
SearchPathA
ExitProcess
GetComputerNameA
GetBinaryTypeA
GetFileType
CancelIo
CallNamedPipeA
BackupRead
SetCurrentDirectoryA
GetDriveTypeW
GetWindowsDirectoryW
GetSystemDirectoryW
GetComputerNameW
GetFileAttributesA
GetFileAttributesW
HeapAlloc
GetProcessHeap
HeapFree
GetWindowsDirectoryA
advapi32
GetUserNameW
winmm
GetDriverModuleHandle
auxGetVolume
Exports
Exports
Sections
.code Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 300KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ