yeeYoYCyu
Static task
static1
Behavioral task
behavioral1
Sample
447bed53bb1a2a4a08ca7b83853e7c85_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
447bed53bb1a2a4a08ca7b83853e7c85_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
447bed53bb1a2a4a08ca7b83853e7c85_JaffaCakes118
-
Size
188KB
-
MD5
447bed53bb1a2a4a08ca7b83853e7c85
-
SHA1
36349af73bc60f318dbd10b28b39bd5eea13e414
-
SHA256
1c4235e5061d2248be534e6dacf44aca16f0d9452a1209eb37e51672c2c3dfd5
-
SHA512
9d22da81bb100e4742729e2dd1038a7be41c4b7e19179ca5b0939721e66a73a832644f9dc409cc8f45c917024f344f25c965f887d6974d8c11d879d929413c43
-
SSDEEP
3072:hfgCPpNLcbtpko7+iLEx20z/Bp4iEIpmMoKGW6qfk7/ye:h4mpNLMC2RLwHe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 447bed53bb1a2a4a08ca7b83853e7c85_JaffaCakes118
Files
-
447bed53bb1a2a4a08ca7b83853e7c85_JaffaCakes118.dll windows:4 windows x86 arch:x86
760944284c9e1f5f23696a9fd22e0ada
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetEvent
GetDateFormatA
GetLocalTime
RtlUnwind
GetCurrentProcess
ExitProcess
TlsGetValue
SetLastError
TlsFree
TlsSetValue
GetCurrentThreadId
RaiseException
LocalAlloc
LocalFree
GetVersion
CloseHandle
GetProcessHeap
HeapFree
HeapAlloc
FormatMessageA
FindResourceA
DeleteCriticalSection
lstrlenA
lstrcpynA
FreeLibrary
LoadResource
InterlockedIncrement
InterlockedDecrement
GetVersionExA
DebugBreak
SetUnhandledExceptionFilter
WideCharToMultiByte
SizeofResource
HeapDestroy
LeaveCriticalSection
IsDBCSLeadByte
lstrcatA
MultiByteToWideChar
lstrlenW
GetLastError
IsBadWritePtr
lstrcpyA
lstrcmpiA
GetModuleHandleA
GetModuleFileNameA
user32
CharUpperA
ShowWindow
wsprintfW
DrawTextA
DrawTextExA
CharNextA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree
CoTaskMemRealloc
shlwapi
StrCmpW
StrCmpIW
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
adata Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ