ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3cc80ae3de1b87a586f905598dea017a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3cc80ae3de1b87a586f905598dea017a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3cc80ae3de1b87a586f905598dea017a_JaffaCakes118
-
Size
60KB
-
MD5
3cc80ae3de1b87a586f905598dea017a
-
SHA1
c6d762f64809adc00ad519befcc2e8771a1caa13
-
SHA256
1acdfdc008340092f0b0d9395bde4f34bfc1ebaec217c51e69378b324ba87fa1
-
SHA512
b1e7bc54b2dc95adcc330ee9ceb8e8b05c898d51209682252a55cc2c78382e8c59812affbb52818e2bf98440e12579816b5b9ce69a71f57de89efc4fad70d8c5
-
SSDEEP
768:C6jVK+NEIxQ8+4lWz5Tgip5i8jNL21WpZywZVRm4v:PjVNNEIfJWz5Tgyi8jh21WpvZVRB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cc80ae3de1b87a586f905598dea017a_JaffaCakes118
Files
-
3cc80ae3de1b87a586f905598dea017a_JaffaCakes118.dll windows:4 windows x86 arch:x86
327b53512534b3ba3992131dc40dba2e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42
ord823
ord3663
ord858
ord4278
ord6662
ord2818
ord540
ord800
ord537
ord665
ord825
ord1979
ord1182
ord342
ord1253
ord1168
ord6394
ord5450
ord6383
ord5440
ord3318
ord535
ord541
ord5861
ord6143
ord801
ord268
ord1567
ord2393
ord354
ord5186
msvcrt
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
atoi
srand
rand
memmove
calloc
_stricmp
isdigit
free
sprintf
time
wcstombs
__CxxFrameHandler
_ftol
_strnicmp
kernel32
GetLastError
GetVersionExA
FreeLibrary
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
CloseHandle
LoadLibraryA
GetProcAddress
Sleep
GetModuleHandleA
VirtualAlloc
CreateThread
CreateEventA
TerminateThread
WaitForSingleObject
GetCurrentThreadId
SetEvent
GetTickCount
LockResource
GetCurrentProcess
FindClose
FindFirstFileA
GetCurrentThread
DeviceIoControl
GlobalFree
GlobalAlloc
CreateFileA
CreateMutexA
user32
wsprintfA
advapi32
OpenSCManagerA
ControlService
SetServiceStatus
RegCloseKey
RegSetValueExA
RegOpenKeyExA
StartServiceA
CloseServiceHandle
CreateServiceA
OpenServiceA
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sxv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ