Static task
static1
Behavioral task
behavioral1
Sample
38eaf50441da44bde1fa5edcea500224_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
38eaf50441da44bde1fa5edcea500224_JaffaCakes118
-
Size
837KB
-
MD5
38eaf50441da44bde1fa5edcea500224
-
SHA1
8e560f6cf6d3c0b53fe8013ffe631a5042b11506
-
SHA256
e7074ba380b2a99863ac4b29e9e20d4a0d40cb2eef597605dd46567ece70337b
-
SHA512
43cc0e09cc28fc22e5044712ab3ea0ad1b82c2d5e40624ae3dc7bba7b3145813b35055365692118eee6da02d7e07234b262362831fc187ed7bb8622f6e4ad70f
-
SSDEEP
12288:0UxX1fYv8+7yHC6dPDXUmgXypq6TIsRv0c5Zeo5p7wJ:0KfYkuyHCzmgSIs6eZeo5p7G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38eaf50441da44bde1fa5edcea500224_JaffaCakes118
Files
-
38eaf50441da44bde1fa5edcea500224_JaffaCakes118.dll windows:4 windows x86 arch:x86
ad6c0ae44664c4d956992135685ee547
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedExchange
GetModuleFileNameA
GetProcAddress
GetVersion
GetStartupInfoA
VirtualAlloc
VirtualProtect
IsBadWritePtr
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
GetACP
GetVersionExA
Sleep
GetCurrentThreadId
GetLastError
GetProcessHeap
QueryPerformanceFrequency
user32
GetCursor
IsWindowUnicode
GetWindowRect
IsCharLowerA
IsCharUpperA
GetWindowRgn
GetWindowDC
WindowFromDC
GetForegroundWindow
CopyIcon
GetDlgItem
GetAncestor
GetWindow
GetLastActivePopup
IsIconic
IsWindowVisible
GetGUIThreadInfo
GetParent
GetDesktopWindow
IsChild
InSendMessage
advapi32
InitializeSecurityDescriptor
IsValidAcl
GetUserNameA
RevertToSelf
msvcrt
malloc
_initterm
free
memmove
_swab
_set_error_mode
rand
_CIsinh
_CIfmod
_CIacos
_itoa
_adjust_fdiv
ldiv
ceil
_pctype
_isctype
ldexp
__mb_cur_max
floor
div
_ltoa
gdi32
GdiFlush
GetROP2
GetBkColor
GetBkMode
GetBitmapDimensionEx
ole32
CoFileTimeNow
CoGetCurrentProcess
shell32
ord524
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ