Static task
static1
Behavioral task
behavioral1
Sample
56b3a586ba64acbcf755f09eb26f5d40_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
56b3a586ba64acbcf755f09eb26f5d40_JaffaCakes118
-
Size
89KB
-
MD5
56b3a586ba64acbcf755f09eb26f5d40
-
SHA1
f96d6e6bdc3c6897ee80fd8615d76038694b0f72
-
SHA256
f8a4c3e288b381d4b4042fec870c92caf5db0b99442a9ec088ef706b132808ef
-
SHA512
8e6b54d13e0ddfcda4ac3ca50da510dfd0ada1e9c2fdb4f609fbbab45fd35ba3e2cc41ba09c7ddad21893f036c087424910c7337d12ec3b891e6669f20431a07
-
SSDEEP
1536:jBpGHMJ4fg/Zcc+PDzCURVaN/Y95yLmYgdbmfoRq:jPGHMmficj6qcQ9KgdgoR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56b3a586ba64acbcf755f09eb26f5d40_JaffaCakes118
Files
-
56b3a586ba64acbcf755f09eb26f5d40_JaffaCakes118.dll windows:5 windows x86 arch:x86
1f655a57c03ea828c5b72b073d402009
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileA
CreateFileW
CreateProcessW
DeleteFileA
DeleteFileW
FlushFileBuffers
FormatMessageW
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
CloseHandle
GetWindowsDirectoryW
HeapAlloc
HeapFree
LocalFree
MoveFileExW
OutputDebugStringW
QueryPerformanceCounter
SetCurrentDirectoryW
SetLastError
SetThreadExecutionState
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
WriteFile
lstrcatW
lstrcmpW
lstrcpyW
lstrlenW
LoadLibraryW
GetProcAddress
GetVersionExW
VirtualAlloc
user32
TranslateMessage
GetMessageA
GetSystemMetrics
LoadIconA
DispatchMessageA
GetSysColor
LoadCursorA
OpenIcon
advapi32
RegQueryValueExW
RegSetValueExW
RegCloseKey
msvcrt
memset
memcpy
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text4 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text3 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ