ExtraCompressionMain
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_63e35e7bbf49951643c0637c8eec3f50.dll
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_63e35e7bbf49951643c0637c8eec3f50
-
Size
531KB
-
MD5
63e35e7bbf49951643c0637c8eec3f50
-
SHA1
b8cbd5bde62c8c944b35250323d02d87b7fb2d93
-
SHA256
d66bf0f19b60a39c3328227aacd6ad535b5c1d21ce213cb5a274acb281372ddd
-
SHA512
2c4a7217abcb598c7c10519e6f37f1069e4f0df9db57ba394a39547986075f332174fcca8a5b4d00f38afb9d41a983c93cb375fa96ec6a8213fb914624a32680
-
SSDEEP
6144:gRpjAnbym5smwmuV/l4I7/LqcxnmfdzwbAAbnWJVfr9fuwE:ypjAnbym5sGuJB7/Gqn8JD7D9dE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_63e35e7bbf49951643c0637c8eec3f50
Files
-
JaffaCakes118_63e35e7bbf49951643c0637c8eec3f50.dll windows:5 windows x86 arch:x86
3bd64179355d077d25807d2b743f2461
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CharToOemA
CharLowerW
CharLowerA
CharUpperW
CharUpperA
kernel32
IsProcessorFeaturePresent
WriteConsoleW
GetTickCount
GetProcessTimes
GetCurrentProcess
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetSystemInfo
GlobalMemoryStatus
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualFree
CloseHandle
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReadFile
GetStdHandle
WriteFile
CreateFileA
CreateFileW
AreFileApisANSI
GetFileSize
SetFilePointer
GetFileInformationByHandle
SetFileTime
SetEndOfFile
GetVersionExA
RtlUnwind
DecodePointer
EncodePointer
RaiseException
HeapAlloc
HeapFree
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
ExitProcess
HeapCreate
HeapDestroy
Sleep
SetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
GetStringTypeW
Exports
Exports
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 357KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE