CLSIDFromStringByBitness
Static task
static1
Behavioral task
behavioral1
Sample
3ae8665cec855968f098414edcacf697_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3ae8665cec855968f098414edcacf697_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3ae8665cec855968f098414edcacf697_JaffaCakes118
-
Size
160KB
-
MD5
3ae8665cec855968f098414edcacf697
-
SHA1
3368b7369498772b61e2ca84c5b5c1614b74cad5
-
SHA256
deeaeb50831ce0f81eebc74a248278d0f97eeb217c678a71467e974acb135150
-
SHA512
44d2c299bad1b847cabb493dcc24f489968631d21494255b5b5a9c17808901de23f312974a6cc27336d6e2cb7aa162bd4388aabcb425822a32358213ec015456
-
SSDEEP
3072:npRwmvcz/kxhd+epkuG2Ui2DcwaPd5a7PfrGF4f9a7mhY+MM0yb1Iat+:xv3vxpkue7e1rM9LNNb1Iat
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ae8665cec855968f098414edcacf697_JaffaCakes118
Files
-
3ae8665cec855968f098414edcacf697_JaffaCakes118.dll windows:4 windows x86 arch:x86
ab2d0f13f4980ac2349bda8137166ab9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
ExitProcess
FindResourceA
FreeEnvironmentStringsW
GetACP
GetCommandLineA
GetConsoleCP
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemInfo
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
LoadResource
MultiByteToWideChar
OpenEventA
RtlUnwind
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateThread
UnhandledExceptionFilter
msvcrt
wcscmp
__p__fmode
swscanf
vswprintf
wcscat
_cexit
user32
EnableWindow
EnumChildWindows
ModifyMenuA
DrawFrameControl
oleaut32
VarBstrCmp
SafeArrayAccessData
OleTranslateColor
OleLoadPicturePath
OleLoadPicture
SafeArrayCreate
shlwapi
PathCombineA
PathFileExistsA
PathAppendA
ChrCmpIA
PathGetCharTypeA
SHDeleteEmptyKeyA
SHDeleteValueA
SHEnumKeyExA
PathBuildRootA
SHOpenRegStreamA
Exports
Exports
Sections
.text Size: 102KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ