zhjkdva
Static task
static1
Behavioral task
behavioral1
Sample
2b93207c376ab55d79f47adae5df35cb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2b93207c376ab55d79f47adae5df35cb_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2b93207c376ab55d79f47adae5df35cb_JaffaCakes118
-
Size
372KB
-
MD5
2b93207c376ab55d79f47adae5df35cb
-
SHA1
4d6a5b47e4928b0a68a6eee5fb49c265ac44161f
-
SHA256
6448a7ea63b7bff1f85d0b3ec86a7b2c2c595935aaef76585a41354cef23b715
-
SHA512
5704dfb9de87df42fb7fc3f2465c83a24ab315ef0c5ba7893fddec52f97287c064d2767e4466884747e59fe27fcbeb554292f8e3f52f4ff50d96aaf51e212b05
-
SSDEEP
6144:PrK2K2LVGeK64E956hxrS+tB0uAVoF9ZUJVgF:A2LVGZ64jhxr/0ulF9y6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b93207c376ab55d79f47adae5df35cb_JaffaCakes118
Files
-
2b93207c376ab55d79f47adae5df35cb_JaffaCakes118.dll windows:4 windows x86 arch:x86
00123cd51fb632d0c6648d16db741d64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
SHEnumKeyExA
UrlCanonicalizeA
kernel32
Beep
SetComputerNameExA
ExitProcess
CallNamedPipeA
BackupSeek
BackupRead
lstrcmpA
lstrlenW
lstrlenA
FlushViewOfFile
GetDriveTypeW
HeapFree
GetWindowsDirectoryA
GetSystemDirectoryA
GetComputerNameW
GetCurrentDirectoryW
HeapAlloc
GetProcessHeap
GetWindowsDirectoryW
advapi32
GetUserNameA
winmm
DrvGetModuleHandle
GetDriverModuleHandle
mmioOpenA
Exports
Exports
Sections
.code Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 933B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ