GetEncryptionForAdapter
Static task
static1
Behavioral task
behavioral1
Sample
3c307c1cd79b6fbfbb804299b5eab6a4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c307c1cd79b6fbfbb804299b5eab6a4_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3c307c1cd79b6fbfbb804299b5eab6a4_JaffaCakes118
-
Size
154KB
-
MD5
3c307c1cd79b6fbfbb804299b5eab6a4
-
SHA1
9692c2ae71b2bf8e05da05c8f750dacfc45c3f1b
-
SHA256
d8a2106271383ad037e5a1f59e116fc2989cbac91cfab41a912b01ff7a610693
-
SHA512
01b36f582287baaafc09439c24da701f0b74cf6e92a5daece6e8621366e865c22c13da5e0922631af14d882bdf02693b65a64a8e1e34b48130b76f0c4bb2a733
-
SSDEEP
3072:+2Z9zd0lgh6Y5gajfRCqLXmP82Ba+nRoVGsPQ9cKOluYMYmEhM0um60b5v:tdh6Y5gajXSaCGB49cKOlNqEhM66
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c307c1cd79b6fbfbb804299b5eab6a4_JaffaCakes118
Files
-
3c307c1cd79b6fbfbb804299b5eab6a4_JaffaCakes118.dll windows:4 windows x86 arch:x86
faa291165177e98f7e191a5126cd9c8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
FindFirstFileA
GetACP
GetLocaleInfoW
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
SetStdHandle
SizeofResource
lstrcatA
lstrcmpiA
msvcrt
vswprintf
__set_app_type
_cexit
strpbrk
wcscmp
_XcptFilter
strspn
user32
MapWindowPoints
SetWindowPlacement
GetClassNameA
GetUpdateRgn
oleaut32
SafeArrayDestroy
SafeArrayCreate
SafeArrayAllocDescriptor
SysReAllocString
RevokeActiveObject
OleTranslateColor
ClearCustData
SysStringLen
VarBstrCat
VarBstrCmp
shlwapi
PathGetCharTypeA
PathGetDriveNumberA
SHDeleteKeyA
SHEnumKeyExA
StrStrA
StrStrIA
StrToIntA
StrSpnA
Exports
Exports
Sections
.text Size: 74KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ