Static task
static1
Behavioral task
behavioral1
Sample
5423b6cba9a78739bfec498d211f276c_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
5423b6cba9a78739bfec498d211f276c_JaffaCakes118
-
Size
151KB
-
MD5
5423b6cba9a78739bfec498d211f276c
-
SHA1
6e492bf0b6f735c920e07d142cad3c9fee02d2de
-
SHA256
d30ffd4a2f7e1f063506dd70e94ff876b251a44201e89beaa167f79e92b87853
-
SHA512
46878b259343e5701930b8ca051f44cc8160cff83f6f6afa8229dc83279051158a413efda4b01bb34fa1ac4b0ad47c684dcbd779979d9ec84f15e8af5140cff5
-
SSDEEP
3072:+/5E60KXnXhddhoqAtULVMtpJW+PIeii72sxPzhO8k6YWsC8VTd/ThWT:U5p0KdDtLKtpJFILroPzhO71+I1FWT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5423b6cba9a78739bfec498d211f276c_JaffaCakes118
Files
-
5423b6cba9a78739bfec498d211f276c_JaffaCakes118.dll windows:4 windows x86 arch:x86
966ac1ed20dde3fca048dd3f6ed32ff2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
GetProcAddress
GetStartupInfoA
GetUserDefaultLCID
MulDiv
GetLocalTime
VirtualAlloc
VirtualProtect
VirtualQuery
DosDateTimeToFileTime
GetCurrentProcess
GetCurrentThreadId
Sleep
QueryPerformanceFrequency
IsDebuggerPresent
SetLastError
IsBadCodePtr
GetComputerNameA
user32
GetMenuContextHelpId
GetWindowContextHelpId
GetWindowTextA
GetWindowDC
IsClipboardFormatAvailable
GetDC
WindowFromDC
GetForegroundWindow
GetIconInfo
GetDlgItem
GetAncestor
GetTitleBarInfo
GetWindow
GetLastActivePopup
GetWindowThreadProcessId
IsZoomed
GetGUIThreadInfo
IsChild
IsMenu
IsCharUpperA
advapi32
IsValidSecurityDescriptor
InitializeSecurityDescriptor
IsValidSid
msvcrt
_adjust_fdiv
malloc
_initterm
free
memchr
_swab
_ultoa
__mb_cur_max
srand
_set_error_mode
rand
ldiv
_errno
_CIpow
time
modf
_pctype
_isctype
_CItanh
gdi32
GetPixel
GdiFlush
GetBkColor
shell32
ord680
ord64
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ