Static task
static1
Behavioral task
behavioral1
Sample
3961dae17b8afc78ebcddbd88e271670_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3961dae17b8afc78ebcddbd88e271670_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3961dae17b8afc78ebcddbd88e271670_JaffaCakes118
-
Size
62KB
-
MD5
3961dae17b8afc78ebcddbd88e271670
-
SHA1
809151b4cbb008ca5660592a40221765e4514948
-
SHA256
f4169b4c07bdc202b7d1e595ed11bc6e0cc8fe0ee3235ecc7b09eb8b46c5de6c
-
SHA512
fd9e5e77011993b75463e8b0b0a7e0401edd0d1d38f560ad61a4226d606fd415067f824d6f9464ba8cd0b5e9d32ca1e23e30229bfb6bab607a7b82a349e02817
-
SSDEEP
384:VbR9NyXlUVtJsh5zelS9uIXBJ5ymXLcOhgTpYoLGlqyL9jskTQ6r+L9jskTQ6r:VdC16tJsmYu6ZG9eskTQ6QskTQ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3961dae17b8afc78ebcddbd88e271670_JaffaCakes118
Files
-
3961dae17b8afc78ebcddbd88e271670_JaffaCakes118.dll windows:4 windows x86 arch:x86
27f464cc074bfa45c50a2c24d5201f1a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetACP
CreateFileW
VirtualAlloc
LoadLibraryA
GetOEMCP
GetCommandLineA
lstrlenW
GetCommandLineW
HeapAlloc
HeapFree
GetProcessHeap
GetProcAddress
SearchPathW
FindResourceW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetVersionExW
GetLocaleInfoW
CreateFileMappingW
LoadLibraryExW
FindResourceExW
LoadResource
SetLastError
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetPrivateProfileIntW
GetPrivateProfileIntA
GetPrivateProfileStringW
GetPrivateProfileStringA
GetFullPathNameW
GetFullPathNameA
GetLocaleInfoA
LoadLibraryExA
GetUserDefaultLCID
LoadLibraryW
GetUserDefaultLangID
HeapReAlloc
user32
LoadCursorW
LoadCursorA
Sections
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata5 Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg5 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text9 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 412B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ