Update
Static task
static1
Behavioral task
behavioral1
Sample
e986f552a891a670990f0c01c95695a2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e986f552a891a670990f0c01c95695a2_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e986f552a891a670990f0c01c95695a2_JaffaCakes118
-
Size
32KB
-
MD5
e986f552a891a670990f0c01c95695a2
-
SHA1
3bb97d584200a10b20ece2fdc5875f0c432470a0
-
SHA256
6bfb4aeaa215c01c69e6685dd3d81d5919d989e57a1b978190d67a3807b9920f
-
SHA512
5c69dca81e7e37d310d6d092fd96a48d732e92a35cc4b6c86d0ee709e9191678a3501c382f667cb9794028eba464a2dc403f3188e6e051f7fd7c1f29736b7bc2
-
SSDEEP
768:lWvHpzfzrOvsp1Awm8rfDJKtcHrPttPF:lWFvOvwAmrLJKyHrl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e986f552a891a670990f0c01c95695a2_JaffaCakes118
Files
-
e986f552a891a670990f0c01c95695a2_JaffaCakes118.dll windows:4 windows x86 arch:x86
d42185bdf643dcc10604eabde646bf55
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseProfileUserMapping
CommConfigDialogA
ConvertDefaultLocale
CopyFileA
CreateFileMappingA
DisconnectNamedPipe
EnumTimeFormatsW
ExitProcess
GetEnvironmentVariableA
GetPriorityClass
GetShortPathNameW
GetStringTypeA
GlobalDeleteAtom
InitializeCriticalSectionAndSpinCount
Module32First
OpenFile
ReadConsoleOutputCharacterA
SetErrorMode
SleepEx
WriteConsoleOutputA
user32
CallWindowProcW
CharLowerBuffA
CharNextW
ClipCursor
DefMDIChildProcW
DlgDirListA
EnumDisplaySettingsExW
FlashWindowEx
GetClipboardFormatNameW
GetDlgItemTextA
GetGuiResources
GetMenuCheckMarkDimensions
GetMenuItemInfoA
GetParent
GetSysColorBrush
GetWindowTextW
InSendMessage
LockWindowStation
LockWindowUpdate
SendMessageCallbackW
SetLogonNotifyWindow
SetMessageExtraInfo
SetProcessDefaultLayout
UpdateWindow
gdi32
BitBlt
CheckColorsInGamut
ChoosePixelFormat
CreateEllipticRgn
DescribePixelFormat
DrawEscape
EnumICMProfilesA
EnumICMProfilesW
FlattenPath
GdiFlush
GetRgnBox
GetTextColor
GetTextExtentExPointA
GetWindowExtEx
PolyPolygon
ResetDCA
ScaleViewportExtEx
SetDIBits
SetDeviceGammaRamp
SetFontEnumeration
SetWinMetaFileBits
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ