___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
3bca740d43ca9673dcf13eb78a7c21b2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3bca740d43ca9673dcf13eb78a7c21b2_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3bca740d43ca9673dcf13eb78a7c21b2_JaffaCakes118
-
Size
119KB
-
MD5
3bca740d43ca9673dcf13eb78a7c21b2
-
SHA1
0641d6a82be544e415378f8e2a5cd2870e1641a5
-
SHA256
aefbad8f769c32028b3cf3053d81d377f9f29e8a1331cbeba6e4ab33d1cf5654
-
SHA512
b022991569fde2340e42d76e3f92a73ec5a340bd0d3ce8f1404e57d314b3442e9079e9d7ef35d3eead5c7949ed33cb841814777135442099e3eacad47a8ace2a
-
SSDEEP
3072:upAVDNxrMYdKtiny+GAuYYhs6v4PDWMeT8H3NcQProFqfX:Njxr3MtgvGANB6v4DWuOQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bca740d43ca9673dcf13eb78a7c21b2_JaffaCakes118
Files
-
3bca740d43ca9673dcf13eb78a7c21b2_JaffaCakes118.dll windows:4 windows x86 arch:x86
6a94224414c47b0e9a1ea0f89a09568c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
IsDBCSLeadByteEx
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
user32
EnumThreadWindows
MessageBoxA
wsprintfA
Exports
Exports
Sections
.text Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ