Static task
static1
Behavioral task
behavioral1
Sample
45c47be6a5bcf9ac24831a78dd036910_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
45c47be6a5bcf9ac24831a78dd036910_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
45c47be6a5bcf9ac24831a78dd036910_JaffaCakes118
-
Size
225KB
-
MD5
45c47be6a5bcf9ac24831a78dd036910
-
SHA1
1a948e83609f9eca2121933f49737458c014f831
-
SHA256
7c5a1f878e8d1ed4cd593140ac20c7dd843f9422aca9ef538d8664933f0619a8
-
SHA512
92dc3b8d439ca0180bace8d4f1f508fb9dad750889011cbbc1dd1f68dde2304cb9e2f8e141f1a9ce369ddfa9a196a94c4dbd74bfdd31b6cd6613008de6f7137b
-
SSDEEP
6144:/LGatnZfeFoKpdtxO8opzMaB46UYddEQL33o:/LVt5AdtM5MaOxYvEQL3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45c47be6a5bcf9ac24831a78dd036910_JaffaCakes118
Files
-
45c47be6a5bcf9ac24831a78dd036910_JaffaCakes118.dll windows:5 windows x86 arch:x86
27b6d68a4ecda0d20f73758972289d7f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FlushFileBuffers
FormatMessageW
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetFullPathNameW
GetLastError
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
DeleteFileW
HeapFree
LocalFree
QueryPerformanceCounter
SetCurrentDirectoryW
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
WriteFile
lstrcatW
lstrcpyW
lstrlenW
CreateFileW
CloseHandle
GetCurrentProcess
GetProcessHeap
LoadLibraryW
GetProcAddress
HeapAlloc
VirtualAlloc
user32
LoadCursorA
LoadIconA
GetSystemMetrics
GetDlgItem
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
GetSysColor
gdi32
GetStockObject
advapi32
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyW
RegSetValueExW
ole32
CoInitialize
msvcrt
memset
memcpy
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ