GetErrorLog
Static task
static1
Behavioral task
behavioral1
Sample
40b4fb47a13eabf1466b587e3adb97f3_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
40b4fb47a13eabf1466b587e3adb97f3_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
40b4fb47a13eabf1466b587e3adb97f3_JaffaCakes118
-
Size
196KB
-
MD5
40b4fb47a13eabf1466b587e3adb97f3
-
SHA1
36c3ece96d7a4568678ccc533b8f426ac274806c
-
SHA256
83fbacf0625e772fb9dbab253ec89e67c164d59ae9fbd694b7d704a4f1bba215
-
SHA512
7357bb44c0763d3fb8def6dc50cacf68291bd12c45b70f1a64f09c5b1418f749fd680f5adc378d550a4869a4b7a5c094c5d8a8d94661717c52e02993c5c85964
-
SSDEEP
6144:Bg+Rm11zFB2wAmLFd4ma2GYA9LXSfl/V8KRfI:BxRm1LAmpaGAJCd/Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40b4fb47a13eabf1466b587e3adb97f3_JaffaCakes118
Files
-
40b4fb47a13eabf1466b587e3adb97f3_JaffaCakes118.dll windows:4 windows x86 arch:x86
7bb8d66a0f7875ec296bee5e6d725210
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CompareStringA
CreateConsoleScreenBuffer
DisableThreadLibraryCalls
ExitProcess
FileTimeToSystemTime
FormatMessageA
FreeLibrary
GetACP
GetCommandLineA
GetCurrentProcess
GetModuleHandleA
GetOEMCP
GetProcessAffinityMask
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
MulDiv
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TlsSetValue
lstrlenA
user32
SetWindowLongA
SetPropA
SetFocus
OffsetRect
FillRect
EndDialog
DefWindowProcA
BeginDeferWindowPos
advapi32
SetEntriesInAuditListA
RegDeleteValueA
IsTokenRestricted
GetSidSubAuthorityCount
StartServiceCtrlDispatcherA
ole32
CoFileTimeNow
CoCreateInstance
IsEqualGUID
StringFromGUID2
CoGetMalloc
CoTaskMemFree
CoCreateGuid
opengl32
glDepthRange
Exports
Exports
Sections
.text Size: 130KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ