pxykernel
Static task
static1
Behavioral task
behavioral1
Sample
2be06e6373ce1ac1aa1d50a134dfff19_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2be06e6373ce1ac1aa1d50a134dfff19_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2be06e6373ce1ac1aa1d50a134dfff19_JaffaCakes118
-
Size
316KB
-
MD5
2be06e6373ce1ac1aa1d50a134dfff19
-
SHA1
c1a99db01fe4f0727ba0474b28635ddc2ed88953
-
SHA256
0eb73ea3abde566ec7fb59b67b1454fbb7246870d6c07e6aa244348cd4e29d89
-
SHA512
410378c225efd23da181421e6164ce4dc691161a4eecbbe4c4c1e1ca266b64af51abb04cd0f11ad8e00d9a58cd187754ac6d862e5fe6ebb8afd42c9dd4e84d83
-
SSDEEP
3072:0uwDCAqn4PaLh1KO8CgvQe12qrU/2Y3NjwHLKePembdejGdvUbBP466JoHfyln1X:D/n4PatvAE26MWeWmBeiabBZ6lnzyM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2be06e6373ce1ac1aa1d50a134dfff19_JaffaCakes118
Files
-
2be06e6373ce1ac1aa1d50a134dfff19_JaffaCakes118.dll windows:4 windows x86 arch:x86
b0fd8e630817cb5445eea8df56d603bb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
MultiByteToWideChar
GetVersionExA
CloseHandle
GetCurrentProcess
TerminateProcess
GetLocalTime
IsBadReadPtr
GetModuleHandleA
CreateFileA
WriteFile
SetFilePointer
WideCharToMultiByte
RtlUnwind
RaiseException
HeapFree
HeapAlloc
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
ExitProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetSystemTime
InterlockedIncrement
HeapSize
TlsAlloc
TlsFree
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
LCMapStringA
LCMapStringW
IsBadCodePtr
SetStdHandle
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedDecrement
LeaveCriticalSection
DeleteCriticalSection
InterlockedExchange
InitializeCriticalSection
Sleep
EnterCriticalSection
LoadLibraryA
GetLastError
SetLastError
GetProcAddress
lstrlenA
HeapReAlloc
lstrcpyA
Exports
Exports
Sections
.text Size: 176KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ