Static task
static1
Behavioral task
behavioral1
Sample
3d448180adec1638794b33b0adf1da1c_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
3d448180adec1638794b33b0adf1da1c_JaffaCakes118
-
Size
160KB
-
MD5
3d448180adec1638794b33b0adf1da1c
-
SHA1
a5d8f9a6b9bdc35ec60a4e79a5bbeab118abd97d
-
SHA256
cac6d547d551cf69fe6851551285a70f25dd9d962a7629174722ebc0ab6cedc9
-
SHA512
88ea308844e59d0d358c9767d0198b320b6043aa5bc022876f058b2ae1acabf2c86a76c19848e057235d9ee9898f0c3d9898d91ddeaa325c80f3d5c979db2384
-
SSDEEP
3072:eafJttKIr30Ql0rGXGuorAKDd48pBIxnynQ50fu7oKME7mJdLk:eGJj3j0Q+2dGD7IxF50lE7mJdQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d448180adec1638794b33b0adf1da1c_JaffaCakes118
Files
-
3d448180adec1638794b33b0adf1da1c_JaffaCakes118.dll windows:4 windows x86 arch:x86
7f1e4f1ec9e337450d7880773f5fa3e9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersion
MulDiv
GetLocalTime
GetProcAddress
VirtualProtect
DosDateTimeToFileTime
GetModuleFileNameA
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GetACP
LoadLibraryA
GetVersionExA
Sleep
IsDebuggerPresent
GetComputerNameA
IsBadWritePtr
VirtualAlloc
user32
GetTopWindow
GetWindow
GetTitleBarInfo
CopyIcon
WindowFromDC
IsClipboardFormatAvailable
GetCursor
GetMenuContextHelpId
GetWindowContextHelpId
GetWindowTextLengthA
IsIconic
GetGUIThreadInfo
GetWindowPlacement
IsChild
IsMenu
BlockInput
GetWindowRgn
GetWindowTextA
GetWindowDC
advapi32
GetUserNameA
IsValidAcl
InitializeSecurityDescriptor
IsValidSecurityDescriptor
RevertToSelf
msvcrt
_CIfmod
_itoa
__doserrno
_adjust_fdiv
malloc
_initterm
free
memchr
srand
_set_error_mode
_CIacos
time
localeconv
_pctype
_isctype
__mb_cur_max
modf
_errno
ldiv
gdi32
GetPixel
GetBkColor
GetBkMode
GetBitmapDimensionEx
GetStretchBltMode
ole32
CoGetCurrentProcess
CoDosDateTimeToFileTime
CoRevertToSelf
shell32
ord680
ord524
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ