Static task
static1
Behavioral task
behavioral1
Sample
e9da21fc008f6d3889d5a4d66e0001f3_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9da21fc008f6d3889d5a4d66e0001f3_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e9da21fc008f6d3889d5a4d66e0001f3_JaffaCakes118
-
Size
308KB
-
MD5
e9da21fc008f6d3889d5a4d66e0001f3
-
SHA1
11f4a1a2dfbe39a9dacf7ade733aa9dba311a16d
-
SHA256
3d34c2aeee309a8ab21eaf637541f93ff276ed8e61a33a0facc108943296b1b8
-
SHA512
79fc714fbfd2eade7e9baa22964bc4f5aad204ad03cc987663833ced5276776bef928531716d36d7655b1a8a7cfbd464d67c5f17c08f5c78f2c1a6582b62a57f
-
SSDEEP
6144:FvR/cB3M6BCbSLlwnFOp+ORujy5dY/agazHN:FvR/cB3M6BCbSLGn9lOY/agazH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9da21fc008f6d3889d5a4d66e0001f3_JaffaCakes118
Files
-
e9da21fc008f6d3889d5a4d66e0001f3_JaffaCakes118.dll windows:4 windows x86 arch:x86
046f4cf7ff2e14ea685b2c89a2c9169b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
CreateBrushIndirect
user32
SetScrollInfo
comctl32
ImageList_Read
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Write
ImageList_Add
ImageList_Remove
ole32
CreateOleAdviseHolder
CoTaskMemFree
StgOpenStorage
advapi32
RegDeleteValueA
GetLengthSid
RegOpenKeyExA
oleaut32
SysReAllocStringLen
SafeArrayCreate
SafeArrayGetUBound
SysAllocStringLen
VariantCopyInd
SafeArrayUnaccessData
SysFreeString
RegisterTypeLib
kernel32
IsBadHugeReadPtr
ExitThread
LocalAlloc
GetVersionExA
GetProcAddress
VirtualAlloc
IsBadReadPtr
WideCharToMultiByte
VirtualQuery
GetModuleHandleA
GetModuleFileNameA
LoadLibraryExA
VirtualAllocEx
GetCommandLineA
SetEndOfFile
lstrlenW
InitializeCriticalSection
LoadLibraryA
GetLastError
GlobalAlloc
GetACP
ExitProcess
version
GetFileVersionInfoSizeA
Sections
CODE Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rsrc1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rsrc7 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Rsrc3 Size: 1KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rsrc9 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Rsrc6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rsrc0 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 594B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ