F11StringNumber
Static task
static1
Behavioral task
behavioral1
Sample
3db8d1f6196600491aaf824ebed98224_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
3db8d1f6196600491aaf824ebed98224_JaffaCakes118
-
Size
120KB
-
MD5
3db8d1f6196600491aaf824ebed98224
-
SHA1
553777602b52e61c8553ba57a9e0f892c1a1b80b
-
SHA256
3c62df4a536a49e021007a5473676954a886ed9bd3468632cd2eff5c64964fb8
-
SHA512
39edabcfd36624042e392a0146a3606b380f9d153fd6c20c49ce1d4297a2acab75c9279fe03c5c17cbd3aaa835c3b3c725bd71dbc7a50fe4c85b337c18956290
-
SSDEEP
1536:bmAfrCp/I4ibcqBdk6w19cLXYZH2X32o7/hS8wIE3aPWpNrvfPPPPPPPPPPPPPPZ:bm8Cp/IMqBd9PDgE0+JWpNDtHTyI3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3db8d1f6196600491aaf824ebed98224_JaffaCakes118
Files
-
3db8d1f6196600491aaf824ebed98224_JaffaCakes118.dll windows:4 windows x86 arch:x86
054f5494444fd476e5bbc31d17633fe8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTickCount
IsProcessorFeaturePresent
SetStdHandle
LocalFree
MultiByteToWideChar
WideCharToMultiByte
FindAtomW
CreateSemaphoreW
DeleteAtom
InterlockedDecrement
CreatePipe
CloseHandle
ExitProcess
CreateSemaphoreA
DeleteFiber
EnumResourceLanguagesA
ExitThread
DuplicateHandle
AddAtomA
AllocConsole
Beep
DeleteTimerQueueTimer
EnumLanguageGroupLocalesA
GetDateFormatA
lstrcpynA
FlushViewOfFile
SleepEx
SetEvent
FreeResource
RemoveDirectoryA
CreateEventA
ReadConsoleA
OpenEventA
FindResourceW
DeleteFileA
FindFirstFileA
EnumTimeFormatsA
EnumCalendarInfoA
GetEnvironmentVariableA
GetAtomNameA
Exports
Exports
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ