wruwutn
Static task
static1
Behavioral task
behavioral1
Sample
3cf3d41171d8637bd4a3e1232eb94c0c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3cf3d41171d8637bd4a3e1232eb94c0c_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3cf3d41171d8637bd4a3e1232eb94c0c_JaffaCakes118
-
Size
43KB
-
MD5
3cf3d41171d8637bd4a3e1232eb94c0c
-
SHA1
2a9e35c2fe78f89de61c0ce43c5bf7d96bcb3f06
-
SHA256
0412df7ad3bcbbdf9a27014e76210ea53e536aeef01afdc3c0ebcc37c94bc299
-
SHA512
9ebc1df01ef3c9abbdb588dc391a0eddbaeb33ba7088bd8b5d582924827b197dbcf36dcb95cd8a7775f9e369d84415ab339831f50b90a7b8533057cbc4960dee
-
SSDEEP
768:iTMh8eifGOHYsogRb85mE+yqZKZM4vKDjiRLXfvMjJ4JNKzLQh4xXj7:iYh85ewYiaCKYjiRLv+J8qLhj7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cf3d41171d8637bd4a3e1232eb94c0c_JaffaCakes118
Files
-
3cf3d41171d8637bd4a3e1232eb94c0c_JaffaCakes118.dll windows:4 windows x86 arch:x86
421d8c560df46d48b2532a77c845da95
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
SHEnumKeyExA
UrlCanonicalizeA
kernel32
Beep
FindClose
GetFileAttributesA
ExitProcess
GetComputerNameA
GetBinaryTypeA
GetFileType
CancelIo
BackupSeek
lstrcmpA
lstrlenW
SetCurrentDirectoryA
HeapFree
GetDriveTypeW
GetWindowsDirectoryW
GetSystemDirectoryW
GetSystemDirectoryA
GetFileAttributesW
lstrcmpW
HeapAlloc
GetProcessHeap
FlushViewOfFile
advapi32
GetUserNameW
winmm
GetDriverModuleHandle
auxGetVolume
Exports
Exports
Sections
.code Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ