Static task
static1
Behavioral task
behavioral1
Sample
5279ade5d148809fb8a60c42bba46508_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5279ade5d148809fb8a60c42bba46508_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
5279ade5d148809fb8a60c42bba46508_JaffaCakes118
-
Size
11KB
-
MD5
5279ade5d148809fb8a60c42bba46508
-
SHA1
a1944c0cc3e7e8855e8f0eae9ada655ba1cd6d6c
-
SHA256
737440548c79f3c9c932d06c90806d8311e929c2d1a3cf91196c046d20f7e884
-
SHA512
c411c2a07b423378974ae84e1d433abdc8506aa0eed96fc7c5515cd16bd6ebe3dcba1e0416edc9b2df3f4a222831051e4346798b6f2c0e492729e76ebb270978
-
SSDEEP
192:oLwXtJ7oBDaGiNm+BMDEssK3lRPQ97bNa8fzB:oOtJ7o4j7MwJK3Tg7bNa8fz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5279ade5d148809fb8a60c42bba46508_JaffaCakes118
Files
-
5279ade5d148809fb8a60c42bba46508_JaffaCakes118.dll windows:4 windows x86 arch:x86
88d88b9eb8ae8e4e3d5e500127f10b03
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnumResourceTypesA
ExitThread
FileTimeToSystemTime
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetDriveTypeA
GetFileAttributesA
GetFileTime
GetModuleFileNameA
GetModuleHandleA
DisableThreadLibraryCalls
GetVolumeInformationA
GetWindowsDirectoryA
LoadLibraryA
MapViewOfFile
Sleep
SystemTimeToTzSpecificLocalTime
Thread32First
Thread32Next
UnmapViewOfFile
VirtualAlloc
VirtualProtect
DeleteFileA
DeviceIoControl
CreateToolhelp32Snapshot
CreateThread
CreateFileMappingA
CreateFileA
GetProcAddress
CloseHandle
user32
GetWindowTextA
GetDlgItemTextA
SendMessageA
GetDC
GetClassNameA
EnumThreadWindows
GetDlgItem
SendDlgItemMessageA
advapi32
GetCurrentHwProfileA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
GetUserNameA
gdi32
GetPixel
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 870B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ